文件历史

提交图

273 次代码提交

作者 SHA1 备注 提交日期
Asim Aslam f88f7d1adf Refresh planner queue for 4703 (#4704)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 14:40:31 +01:00
Asim Aslam c80d0c62d8 Refresh planner queue for 4695 (#4697)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 13:30:12 +01:00
Asim Aslam 7d2e9ec6ac Refresh planner priorities for 4691 (#4692)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 12:32:15 +01:00
Asim Aslam a421a54a77 Refresh planner queue for 4685 (#4686)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 11:39:57 +01:00
Asim Aslam c74c067a09 Refresh planner priorities for 4681 (#4682)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 10:43:36 +01:00
Asim Aslam 6b855365df Refresh planner priorities for 4675 (#4676)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 09:45:16 +01:00
Asim Aslam ca3aa27ad2 Refresh planner priorities for 4669 (#4670)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 08:41:30 +01:00
Asim Aslam 35558d46d0 Refresh planner priorities for 4660 (#4661)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 07:57:51 +01:00
Asim Aslam 62df8e0ab3 Refresh planner priorities for 4648 (#4651)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 06:10:42 +01:00
Asim Aslam 5bc2e8d9fc Refresh planner queue for 4643 (#4645)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 04:12:48 +01:00
Asim Aslam 730137cee9 Refresh planner queue for 4638 (#4640)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 02:42:47 +01:00
Asim Aslam 3bb388d57e Refresh planner priorities for 4633 (#4635)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 01:42:10 +01:00
Asim Aslam e5411c7b3a Refresh planner priorities for 4626 (#4628)
Co-authored-by: Codex <codex@openai.com>
2026-07-11 00:28:00 +01:00
Asim Aslam 7b51be5ba8 Refresh planner priorities for 4622 (#4623)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 23:34:01 +01:00
Asim Aslam c7d510349e Refresh planner priorities for 4617 (#4619)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 22:35:20 +01:00
Asim Aslam ba7db2f315 Refresh planner priorities for 4613 (#4614)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 21:36:12 +01:00
Asim Aslam bd433239d7 docs: refresh planner priorities for 4609 (#4610)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 20:43:17 +01:00
Asim Aslam 06a4375e47 docs: refresh planner priorities for 4603 (#4604)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 19:40:51 +01:00
Asim Aslam 86ef6232bb docs: refresh planner priorities for 4598 (#4600)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 18:38:52 +01:00
Asim Aslam 28c411f0f7 docs: refresh planner priorities for 4590 (#4592)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 17:50:17 +01:00
Asim Aslam 84cb4532f5 docs: refresh planner priorities for 4586 (#4587)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 16:59:47 +01:00
Asim Aslam cddf85c218 docs: refresh planner priorities for 4581 (#4582)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 16:06:17 +01:00
Asim Aslam 87f011471b docs: refresh planner priorities for 4576 (#4577)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 14:47:25 +01:00
Asim Aslam 93ecf886a5 docs: refresh planner priorities for 4567 (#4570)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 14:01:54 +01:00
Asim Aslam fc4921087f docs: refresh planner priorities for 4560 (#4562)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 12:07:15 +01:00
Asim Aslam bba3b8ba98 ci: add govulncheck vulnerability gate (+ wire into loop triage) (#4558)
Adds a deterministic reachable-CVE gate: `govulncheck ./...` on every push/PR,
failing on any reachable vulnerability EXCEPT an explicit allow-list of
known-unfixable ones. Today the allow-list holds exactly the two pgx/v4 CVEs
(GO-2026-5004, GO-2026-4518) with no upstream fix (tracked in #4556), so the
gate is green now and turns red the moment a NEW vulnerability appears.

This is the deterministic layer under the `security` loop role: the role
audits with judgment, this blocks known CVEs mechanically. Also adds
`govulncheck` to the loop-triage watch list, so a newly-disclosed CVE that
reddens the gate on master auto-files a fix issue for the loop to bump the dep.

Make `govulncheck` a required status check on master to enforce it.
Verified locally: exit 3 with only the two allow-listed IDs -> gate PASS.


Claude-Session: https://claude.ai/code/session_01CmdEY7pYmV5zzwCjNJ4ykL

Co-authored-by: Claude <noreply@anthropic.com>
2026-07-10 11:04:36 +01:00
Asim Aslam 2cf95b27c8 security: patch reachable CVEs (28 of 30) via toolchain + dependency bumps (#4555)
govulncheck reported 30 reachable vulnerabilities. Remediation:
- Pin `toolchain go1.25.12` and build CI on Go 1.25 (lint/tests workflows):
  clears ~24 Go standard-library CVEs (crypto/tls, crypto/x509, net/http,
  html/template, net/url, os, …) that were present under go1.24.7.
- Bump `golang.org/x/net` v0.38.0 -> v0.55.0 and `google.golang.org/grpc`
  v1.71.1 -> v1.79.3 (grpc raises the module's Go directive to 1.25).

Result: govulncheck drops from 30 -> 2. The remaining two
(github.com/jackc/pgx/v4, github.com/jackc/pgproto3/v2) have no upstream fix
and require a pgx v5 migration — tracked separately; the govulncheck gate will
follow with those explicitly allow-listed until migrated.

Note: this raises go-micro's minimum Go to 1.25 (forced by the grpc security
bump). Verified: build, go vet, and the ai/agent/flow/store/registry/broker/
wrapper/cmd + grpc/net-dependent packages pass on 1.25.12.


Claude-Session: https://claude.ai/code/session_01CmdEY7pYmV5zzwCjNJ4ykL

Co-authored-by: Claude <noreply@anthropic.com>
2026-07-10 10:56:16 +01:00
Asim Aslam 700b72b0d6 docs: refresh planner priorities for 4551 (#4552)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 10:15:53 +01:00
Asim Aslam 167ca22107 docs: refresh planner priorities for 4543 (#4544)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 08:18:14 +01:00
Asim Aslam 1d795ef975 docs: refresh planner priorities for 4538 (#4539)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 06:29:51 +01:00
Asim Aslam 56df17ce25 docs: refresh planner priorities for 4532 (#4533)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 04:20:13 +01:00
Asim Aslam 7a70fcf114 docs: refresh planner priorities for 4524 (#4525)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 02:47:03 +01:00
Asim Aslam ec698505ec docs: refresh planner priorities for 4517 (#4518)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 01:53:30 +01:00
Asim Aslam 39e92203dc docs: refresh planner priorities for 4512 (#4513)
Co-authored-by: Codex <codex@openai.com>
2026-07-10 00:39:39 +01:00
Asim Aslam 801f8f0f83 docs: refresh planner priorities for 4507 (#4509)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 23:43:09 +01:00
Asim Aslam 4806f2fa17 docs: refresh planner priorities for 4499 (#4501)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 22:39:14 +01:00
Asim Aslam b751497385 docs: refresh planner priorities for 4494 (#4496)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 21:45:13 +01:00
Asim Aslam cae5549c73 docs: refresh planner priorities for 4490 (#4491)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 20:34:37 +01:00
Asim Aslam 892fc847f0 docs: refresh planner priorities for 4482 (#4484)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 19:49:08 +01:00
Asim Aslam fc6e24daa3 docs: refresh planner priorities for 4478 (#4479)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 18:50:53 +01:00
Asim Aslam 1091e68bc1 docs: refresh planner priorities for 4473 (#4474)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 17:59:10 +01:00
Asim Aslam 2bd02cc960 docs: refresh planner priorities for 4467 (#4468)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 15:11:44 +01:00
Asim Aslam d1a34efadc docs: refresh planner priorities for 4460 (#4461)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 14:06:52 +01:00
Asim Aslam c77f19ec80 docs: refresh planner priorities for 4452 (#4453)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 12:09:33 +01:00
Asim Aslam 60612dc664 docs: refresh planner priorities for 4440 (#4442)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 08:25:52 +01:00
Asim Aslam 9d6d2d6c91 docs: refresh planner priorities for 4434 (#4435)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 06:26:29 +01:00
Asim Aslam 84c1ee7471 docs: refresh planner priorities for 4427 (#4429)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 04:18:01 +01:00
Asim Aslam c7df280d93 docs: refresh planner queue for 4422 (#4424)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 02:38:30 +01:00
Asim Aslam 0d4a101532 docs: refresh planner priorities for 4416 (#4417)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 01:44:05 +01:00
Asim Aslam 5e6d51d261 docs: refresh planner priorities for 4407 (#4409)
Co-authored-by: Codex <codex@openai.com>
2026-07-09 00:42:18 +01:00