Repository navigation
Conversation
|
PR-cycle state — maintained automatically. Do not edit by hand. Mechanical PR-cycle state (JSON){
"approval": {
"candidate_revision_fingerprint": "sha256:d1bcef7961440e5dd66e97eb40074418a52b63de4fd2ba2e46177a5a2228aa12",
"evidence": {
"attestations": [],
"candidate_revision_fingerprint": "sha256:d1bcef7961440e5dd66e97eb40074418a52b63de4fd2ba2e46177a5a2228aa12",
"check_conclusions": [
{
"conclusion": "SUCCESS",
"name": "Gitar",
"run_id": 118530318371
},
{
"conclusion": "SUCCESS",
"name": "Platform Linux arm64",
"run_id": 118530330796
},
{
"conclusion": "SUCCESS",
"name": "Platform Linux x64",
"run_id": 118530330675
},
{
"conclusion": "SUCCESS",
"name": "Platform Windows arm64",
"run_id": 118530331744
},
{
"conclusion": "SUCCESS",
"name": "Platform Windows x64",
"run_id": 118530330992
},
{
"conclusion": "SUCCESS",
"name": "Platform macOS arm64",
"run_id": 118530330706
},
{
"conclusion": "SUCCESS",
"name": "Platform macOS x64",
"run_id": 118530330730
},
{
"conclusion": "SUCCESS",
"name": "Python 3.10",
"run_id": 118530330682
},
{
"conclusion": "SUCCESS",
"name": "Python 3.11",
"run_id": 118530330837
},
{
"conclusion": "SUCCESS",
"name": "Python 3.12",
"run_id": 118530330552
},
{
"conclusion": "SUCCESS",
"name": "Python 3.14",
"run_id": 118530330775
},
{
"conclusion": "SUCCESS",
"name": "Python lint",
"run_id": 118530330381
},
{
"conclusion": "SUCCESS",
"name": "Website",
"run_id": 118530330728
}
],
"delivery_deferral_ledger_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
"finding_dispositions_digest": "sha256:3df840b904b26355b4dac9b169c486720370c3d76d98cce53d53ec20b673cfaa",
"operation_identity": "sha256:51fab68e173ad57ac5e2d3d2f53f9fdc4cf487e779b516dd11fda69192776e76",
"review_request": {
"body_digest": "sha256:a61cc39131c11a019b0eae80a682cfc81512162a78d32a6c13266ad31398e382",
"id": 6286851543
},
"review_result": {
"body_digest": "sha256:11bb00d2b60e348622d74098cc935dfb7507338d97a82b64144ffbe97fa60587",
"id": 6286876128
}
},
"evidence_fingerprint": "sha256:65e3cf45af613f281bbc59de5f87edc9ae7b0808649b5c6d38a7e4d301e370e7",
"head_sha": "5ee3b2014a2b1d562346af4d258faecc6a096723",
"operation_identity": "sha256:51fab68e173ad57ac5e2d3d2f53f9fdc4cf487e779b516dd11fda69192776e76",
"review_request_id": 6286851543,
"review_result_id": 6286876128,
"status": "approved-evidence-recorded"
},
"candidate_revision_fingerprint": "sha256:d1bcef7961440e5dd66e97eb40074418a52b63de4fd2ba2e46177a5a2228aa12",
"check_conclusions": [
{
"conclusion": "SUCCESS",
"name": "Gitar",
"run_id": 118530318371
},
{
"conclusion": "SUCCESS",
"name": "Platform Linux arm64",
"run_id": 118530330796
},
{
"conclusion": "SUCCESS",
"name": "Platform Linux x64",
"run_id": 118530330675
},
{
"conclusion": "SUCCESS",
"name": "Platform Windows arm64",
"run_id": 118530331744
},
{
"conclusion": "SUCCESS",
"name": "Platform Windows x64",
"run_id": 118530330992
},
{
"conclusion": "SUCCESS",
"name": "Platform macOS arm64",
"run_id": 118530330706
},
{
"conclusion": "SUCCESS",
"name": "Platform macOS x64",
"run_id": 118530330730
},
{
"conclusion": "SUCCESS",
"name": "Python 3.10",
"run_id": 118530330682
},
{
"conclusion": "SUCCESS",
"name": "Python 3.11",
"run_id": 118530330837
},
{
"conclusion": "SUCCESS",
"name": "Python 3.12",
"run_id": 118530330552
},
{
"conclusion": "SUCCESS",
"name": "Python 3.14",
"run_id": 118530330775
},
{
"conclusion": "SUCCESS",
"name": "Python lint",
"run_id": 118530330381
},
{
"conclusion": "SUCCESS",
"name": "Website",
"run_id": 118530330728
}
],
"check_observations": [
{
"checks": [
{
"conclusion": "SUCCESS",
"name": "Gitar",
"run_id": 118530318371,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/runs/118530318371"
},
{
"conclusion": "SUCCESS",
"name": "Platform Linux arm64",
"run_id": 118530330796,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330796"
},
{
"conclusion": "SUCCESS",
"name": "Platform Linux x64",
"run_id": 118530330675,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330675"
},
{
"conclusion": "SUCCESS",
"name": "Platform Windows arm64",
"run_id": 118530331744,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530331744"
},
{
"conclusion": "SUCCESS",
"name": "Platform Windows x64",
"run_id": 118530330992,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330992"
},
{
"conclusion": "SUCCESS",
"name": "Platform macOS arm64",
"run_id": 118530330706,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330706"
},
{
"conclusion": "SUCCESS",
"name": "Platform macOS x64",
"run_id": 118530330730,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330730"
},
{
"conclusion": "SUCCESS",
"name": "Python 3.10",
"run_id": 118530330682,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330682"
},
{
"conclusion": "SUCCESS",
"name": "Python 3.11",
"run_id": 118530330837,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330837"
},
{
"conclusion": "SUCCESS",
"name": "Python 3.12",
"run_id": 118530330552,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330552"
},
{
"conclusion": "SUCCESS",
"name": "Python 3.14",
"run_id": 118530330775,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330775"
},
{
"conclusion": "SUCCESS",
"name": "Python lint",
"run_id": 118530330381,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330381"
},
{
"conclusion": "SUCCESS",
"name": "Website",
"run_id": 118530330728,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39393468132/job/118530330728"
}
],
"head_sha": "5ee3b2014a2b1d562346af4d258faecc6a096723",
"id": "sha256:9f58d98cf6ed36dfd0636b7b2684c72eddd41b96cb28fb36f977dbeaaacb37be",
"required_checks": [
"Gitar",
"Platform Linux arm64",
"Platform Linux x64",
"Platform Windows arm64",
"Platform Windows x64",
"Platform macOS arm64",
"Platform macOS x64",
"Python 3.10",
"Python 3.11",
"Python 3.12",
"Python 3.14",
"Python lint",
"Website"
],
"status": "success"
},
{
"checks": [
{
"conclusion": "CANCELLED",
"name": "Deploy website",
"run_id": 118523961442,
"run_status": "completed",
"status": "failure",
"url": "https://github.com/omry/arbiter/actions/runs/39391530717/job/118523961442"
},
{
"conclusion": "SUCCESS",
"name": "Gitar",
"run_id": 118523944236,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/runs/118523944236"
},
{
"conclusion": "FAILURE",
"name": "Platform Linux arm64",
"run_id": 118523962953,
"run_status": "completed",
"status": "failure",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523962953"
},
{
"conclusion": "FAILURE",
"name": "Platform Linux x64",
"run_id": 118523963191,
"run_status": "completed",
"status": "failure",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523963191"
},
{
"name": "Platform Windows arm64",
"run_id": 118523963043,
"run_status": "in_progress",
"status": "pending",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523963043"
},
{
"conclusion": "FAILURE",
"name": "Platform Windows x64",
"run_id": 118523962943,
"run_status": "completed",
"status": "failure",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523962943"
},
{
"name": "Platform macOS arm64",
"run_id": 118523963096,
"run_status": "in_progress",
"status": "pending",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523963096"
},
{
"name": "Platform macOS x64",
"run_id": 118523963197,
"run_status": "in_progress",
"status": "pending",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523963197"
},
{
"conclusion": "FAILURE",
"name": "Python 3.10",
"run_id": 118523962962,
"run_status": "completed",
"status": "failure",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523962962"
},
{
"conclusion": "FAILURE",
"name": "Python 3.11",
"run_id": 118523962641,
"run_status": "completed",
"status": "failure",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523962641"
},
{
"conclusion": "FAILURE",
"name": "Python 3.12",
"run_id": 118523963136,
"run_status": "completed",
"status": "failure",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523963136"
},
{
"conclusion": "FAILURE",
"name": "Python 3.14",
"run_id": 118523963014,
"run_status": "completed",
"status": "failure",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523963014"
},
{
"conclusion": "SUCCESS",
"name": "Python lint",
"run_id": 118523963048,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523963048"
},
{
"conclusion": "SUCCESS",
"name": "Website",
"run_id": 118523962912,
"run_status": "completed",
"status": "success",
"url": "https://github.com/omry/arbiter/actions/runs/39391530726/job/118523962912"
}
],
"head_sha": "0860857b61238f0317f1136938f5341f7601052f",
"id": "sha256:cdc08e81a018f1e73f0434c2d1235b6bcd351988e56facc0a7ce33b91e37f998",
"required_checks": [
"Deploy website",
"Gitar",
"Platform Linux arm64",
"Platform Linux x64",
"Platform Windows arm64",
"Platform Windows x64",
"Platform macOS arm64",
"Platform macOS x64",
"Python 3.10",
"Python 3.11",
"Python 3.12",
"Python 3.14",
"Python lint",
"Website"
],
"status": "failure"
}
],
"delivery_deferral_ledger_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
"delivery_deferrals": [],
"findings": [
{
"classification": "current-slice",
"evidence": [
"https://github.com/omry/arbiter/pull/37#discussion_r4322876392",
"https://github.com/omry/arbiter/pull/37#discussion_r4322979100",
"https://github.com/omry/arbiter/commit/5ee3b2014a2b1d562346af4d258faecc6a096723"
],
"id": 4322876392,
"invariant": "The repository pinning policy and regression must explicitly implement the owner-approved v1 maintenance workflow exception while retaining immutable references elsewhere.",
"proposed_fix_paths": [
"README.md",
"server/tests/unit/test_release_workflow_supply_chain.py"
],
"reviewed_head": "0860857b61238f0317f1136938f5341f7601052f",
"severity": "high",
"source_url": "https://github.com/omry/arbiter/pull/37#discussion_r4322876392",
"status": "addressed"
}
],
"pr": {
"base_ref": "main",
"base_sha": "8f48f6196b4617d563205f1cff82e076066de048",
"body_digest": "sha256:2a9437b09fe08b4a446f997e384725075301f011fbdde2afaa11dac599a788ae",
"diff_digest": "sha256:048506fb454fc7bed70900ca563d4e35e8f315c922031a81931a12c1b6877a6a",
"head_ref": "pr37",
"head_sha": "5ee3b2014a2b1d562346af4d258faecc6a096723",
"pr": 37,
"repository": "omry/arbiter",
"scope_authority": [],
"title_digest": "sha256:cc3a803cc2a3759527b5f300e196e98f1fb2cd0d76e0e73492b7c7c92bc24b36"
},
"record_version": 7,
"review_observations": [],
"review_requests": [
{
"base_established_at": "2026-10-20T06:49:48Z",
"base_ref": "main",
"base_sha": "8f48f6196b4617d563205f1cff82e076066de048",
"body_digest": "sha256:d5d89ec603fd0f727559dab0bf78e88215efbb57a02291c472edcd39d7a6b8aa",
"created_at": "2026-10-20T08:14:44Z",
"head_sha": "0860857b61238f0317f1136938f5341f7601052f",
"id": 6286568869,
"kind": "regular-review"
},
{
"base_established_at": "2026-10-20T06:49:48Z",
"base_ref": "main",
"base_sha": "8f48f6196b4617d563205f1cff82e076066de048",
"body_digest": "sha256:a61cc39131c11a019b0eae80a682cfc81512162a78d32a6c13266ad31398e382",
"created_at": "2026-10-20T08:31:39Z",
"head_sha": "5ee3b2014a2b1d562346af4d258faecc6a096723",
"id": 6286851543,
"kind": "regular-review"
}
],
"review_results": [
{
"base_ref": "main",
"base_sha": "8f48f6196b4617d563205f1cff82e076066de048",
"body_digest": "sha256:24ca8e335183063bc334b257db42f7c11f5c80d9cf736d117b5c8b606615f16e",
"commit_id": "0860857b61238f0317f1136938f5341f7601052f",
"id": 5582470833,
"inline_message_ids": [
4322876392
],
"request_comment_id": 6286568869,
"result_kind": "findings",
"status": "result",
"submitted_at": "2026-10-20T08:16:09Z",
"unresolved_thread_ids": [
"PRRT_kwDOSmRaHM6uQCL-"
]
},
{
"base_ref": "main",
"base_sha": "8f48f6196b4617d563205f1cff82e076066de048",
"body_digest": "sha256:11bb00d2b60e348622d74098cc935dfb7507338d97a82b64144ffbe97fa60587",
"commit_id": "5ee3b2014a2b1d562346af4d258faecc6a096723",
"id": 6286876128,
"inline_message_ids": [],
"request_comment_id": 6286851543,
"result_kind": "clean",
"status": "result",
"submitted_at": "2026-10-20T08:33:03Z",
"unresolved_thread_ids": []
}
],
"revision_fingerprint": "sha256:d1bcef7961440e5dd66e97eb40074418a52b63de4fd2ba2e46177a5a2228aa12",
"rounds": [
{
"applied_fix_paths": [
"README.md",
"server/tests/unit/test_release_workflow_supply_chain.py"
],
"disposition_changes": [
4322876392
],
"effective_diff_digest": "sha256:048506fb454fc7bed70900ca563d4e35e8f315c922031a81931a12c1b6877a6a",
"finding_ids": [
4322876392
],
"invariants": [
"Owner-approved v1 exception is explicit and remains limited to the two maintenance workflow calls."
],
"outcome": "corrected-head-needs-review",
"proposed_fix_paths": [
"README.md",
"server/tests/unit/test_release_workflow_supply_chain.py"
],
"resulting_head": "5ee3b2014a2b1d562346af4d258faecc6a096723",
"review_observation_id": null,
"review_request_id": 6286568869,
"review_result_id": 5582470833,
"reviewed_head": "0860857b61238f0317f1136938f5341f7601052f",
"root_cause": "The preexisting SHA-only regression and documentation were not reconciled with the owner-approved v1 adoption.",
"round": 1,
"unresolved_current_slice_findings": 0,
"unresolved_design_blockers": 0
},
{
"applied_fix_paths": [],
"disposition_changes": [
4322876392
],
"effective_diff_digest": "sha256:048506fb454fc7bed70900ca563d4e35e8f315c922031a81931a12c1b6877a6a",
"finding_ids": [
4322876392
],
"invariants": [],
"outcome": "clean",
"proposed_fix_paths": [],
"resulting_head": "5ee3b2014a2b1d562346af4d258faecc6a096723",
"review_observation_id": null,
"review_request_id": 6286851543,
"review_result_id": 6286876128,
"reviewed_head": "5ee3b2014a2b1d562346af4d258faecc6a096723",
"root_cause": null,
"round": 2,
"unresolved_current_slice_findings": 0,
"unresolved_design_blockers": 0
}
],
"schema": "awd:swe:pr-cycle-state",
"version": 2
} |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Didn't find any major issues. Keep it up! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 0860857b61
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Use the reviewed shared action from hydra-ecosystem/github-actions#31 so generated dependency proposals lead with validation and confirmed security fixes, with advisory links and expandable details. Validation: the canonical installer reports this installation current at e259605a4cad9d744a174a3b32960d9e1805a68d. The caller diff contains only the audit and publication pins.
Code Review ✅ Approved🔴 High risk Switches the Node maintenance workflow calls in VerificationRules No rules evaluated Functional validation Not enabledFor more verification details, comment OptionsAuto-apply is off → Gitar will not commit updates to this branch. Comment with these commands to change the behavior for this request:
Was this helpful? React with 👍 / 👎 | Powered by Gitar — free for open source |
|
Codex Review: Didn't find any major issues. Hooray! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
Use the shared Node maintenance
v1release tag for both audit and publication. Compatible workflow fixes now reach this installation without a separate commit-pin PR for every release. This release also brings concise dependency PR descriptions with visible validation, security fixes, and advisory links.The project configuration, toolchain, maintenance policy, and schedules stay as configured. Breaking workflow releases require an explicit major-version update. Full commit SHA pinning remains available when each code update needs local approval.
Validation: canonical installer equivalence and no-write repeat, local caller review, exact-head hosted review, and repository CI before merge.
The repository reference policy now explicitly permits only these two maintenance workflow calls at
@v1independency-audit.yml. README documents that trust decision, and regression cases reject other callers, sources, workflows, branches, and major tags while retaining full-SHA support.