release(3.2.0): buildable dev resolution, Slack-free CI, and an enforced 100% coverage gate

[rennf93]

release(3.2.0)

Version bump to 3.2.0 plus the CHANGELOG and release-notes section for the delta since v3.1.0.

Fixed

• guard-agent[dev] installs resolve again (chore(deps): bump semgrep to a buildable version #65). With no committed uv.lock, fresh uv sync --extra dev resolutions backtracked semgrep to 0.86.3 (sdist build aborts without a system semgrep-core binary), breaking dev installs in this repo's CI and the guard-core ecosystem-gate consumer jobs. semgrep is now floored at >=1.100,<2 (already on master via chore(deps): bump semgrep to a buildable version #65); the release ships it.

Changed

• CI no longer posts Slack notifications (ci: remove Slack notification steps #64). Slack steps removed from ci.yml, code-ql.yml, docs.yml, release-shim.yml, release.yml and scheduled-lint.yml.
• The 100% coverage gate is enforced in CI (ci: remove Slack notification steps #64). The test job now runs pytest with --cov-fail-under=100.
• github/codeql-action bumped from 4.38.1 to 4.38.2 (chore(deps): bump github/codeql-action from 4.38.1 to 4.38.2 #63).

Notes

• guard-core is not a direct dependency of guard-agent (tests assert it is never imported standalone), so no guard-core floor bump applies in this release.

Gates

• make lint: exit 0 (ruff format, ruff check, mypy, vulture)
• bandit, radon, xenon, deptry: exit 0
• REDIS_URL=redis://localhost:6379/6 uv run pytest -q --cov-fail-under=100: exit 0, 529 passed, 2 skipped, 100.00% coverage

Summary by CodeRabbit

• Release
  • Released version 3.2.0 and updated the documentation’s latest-version listing.
• Chores
  • Updated the CodeQL analysis action.
  • Adjusted the Semgrep development dependency constraint.
  • Removed Slack notifications from six CI workflows.
  • CI now fails when test coverage falls below 100%.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

🧰 Additional context used

📚 Code guidelines (2)

CHANGELOG.md — configured
CLAUDE.md — auto-discovered

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 5c29b740-060a-4b54-a7ba-2c7ca181c5e3

📥 Commits

Reviewing files that changed from the base of the PR and between 43e0fb8 and 9297786.

📒 Files selected for processing (6)

• .mike.yml
• CHANGELOG.md
• docs/release-notes.md
• docs/versions/versions.json
• guard_agent/_version.py
• pyproject.toml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The package version and documentation indexes now identify version 3.2.0 as latest. The changelog and release notes add entries describing the semgrep constraint, CI changes, and CodeQL action update.

Changes

3.2.0 release update

Layer / File(s)	Summary
Update version references pyproject.toml, guard_agent/_version.py, .mike.yml, docs/versions/versions.json	The package version changes to 3.2.0. The documentation version lists add 3.2.0 and set it as latest.
Add 3.2.0 release notes CHANGELOG.md, docs/release-notes.md	The release entries report the semgrep version constraint, removal of Slack notifications from six CI workflows, a 100% test coverage minimum, and a CodeQL action update from 4.38.1 to 4.38.2.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 92977

No actionable merge-blocking risk was identified; the release version references are consistent, and the notes describe the release scope since v3.1.0.

Architecture Summary

Architecture risk: 🔵 Low · up to 92977

The change affects 4 systems.

Changed systems: guard_agent, docs, CHANGELOG.md, pyproject.toml

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — guard_agent (service) was modified; 1 changed file maps to changed impact.
• observed — docs (service) was modified; 2 changed files map to changed impact.
• observed — CHANGELOG.md (service) was modified; 1 changed file maps to changed impact.
• observed — pyproject.toml (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in CHANGELOG.md: Adds the v3.2.0 release heading and a fix noting that semgrep is constrained to >=1.100,<2, avoiding the 0.86.3 source distribution during fresh dev-extra resolution.
• observed — Modified behavior in CHANGELOG.md: Adds changelog entries stating that Slack notification steps were removed from six CI workflows, pytest now enforces a 100% coverage minimum, and github/codeql-action was upgraded from 4.38.1 to 4.38.2.
• observed — Modified behavior in docs/release-notes.md: Added the v3.2.0 heading and a fixed item stating that semgrep is constrained to >=1.100,<2; the notes report that this allows fresh dev-extra resolution to select a wheel release and install successfully.
• observed — Modified behavior in docs/release-notes.md: Added changed items reporting removal of Slack notifications from six CI workflows, enforcement of a 100% coverage minimum in the test job, and the CodeQL action upgrade from 4.38.1 to 4.38.2.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the 3.2.0 release and summarizes the main changes: buildable development dependency resolution, removal of Slack notifications from CI, and enforcement of 100% test covera…
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}