chore(main): release 1.266.0

[coreplane-infra]

🤖 I have created a release beep boop

1.266.0 (2026-09-26)

Features

• coding: inspect and retry Depot CI through the edge (#2413) (a941941)
• web: stage disabled account-link consent (#2407) (9caf6b3)

Bug fixes

• ship: keep existing-PR recovery bound and callable (#2422) (481ef85)
• ship: keep named PRs bound across stopped pipelines (#2418) (3b2ea78)
• ship: refuse unproved historical recovery authority (#2419) (546381f)

---

This PR was generated with Release Please. See documentation.

[github-actions]

What merging this release deploys

Deploy targets for 0f14965: 2 of 4 Workers — bot, resident

Worker	Decision	Judged against	Why
memory	skip	live dccb108	no input changed
bot	deploy	live dccb108	deploy/cloudflare/depotCi.ts deploy/cloudflare/worker.ts src/channels/adminCoordinator.ts src/channels/linkBrowser.ts src/core/depotCi.ts src/core/dispatch/authorize.ts src/core/dispatch/reply.ts src/core/dispatch/runLoop.ts … +18 more
resident	deploy	live a06bf8a	src/core/refusal.ts (imported by deploy/cloudflare-resident/worker.ts)
sandbox	skip	live 903ae28	no input changed

Unclassified paths: none.

Judged per Worker against the commit it is serving right now. Re-rendered by the release-please workflow on every merge to main; merging this PR runs deploy all --affected and deploys exactly the Workers marked deploy.

[coreplane-switchboard]

LGTM: Release 1.266.0 is consistent with merged #2413, the bot-only production deploy target, and green head checks; Depot tokens remain optional and separately provisioned.

Note

Approved · head 7f52ec6 · no findings

Full review

Approved at exact head 7f52ec6879bc88537db1d441a4b916c861d203f8; no concrete release issues found. The head contains merged #2413 (a941941), all 29 reported head checks completed successfully or were skipped, and the release deploy-targets comment identifies bot only. Deployment does not provision DEPOT_API_TOKEN or DEPOT_CI_BRIDGE_TOKEN; both remain optional, separate secrets. This sandbox does not expose the review run ID or its permalink, so I cannot report those without guessing.

[github-actions]

Auto-approved: coreplane-switchboard[bot] reviewed this PR and posted an LGTM verdict (see its review). This repository opted in through its REVIEW_BOT_LOGIN and REVIEW_BOT_ID variables.

[coreplane-switchboard]

LGTM: Release 1.266.0 contents, bot-only deploy target, and current-head CI check out; Depot credentials and live-child proof remain post-deploy gates.

Note

Approved · head d40807c · no findings

Full review

No findings at d40807c; verdict: approve. Release 1.266.0 includes the merged #2418 fix, the derived plan deploys only the bot Worker, and all current-head CI checks completed successfully or were skipped as expected. Depot secret provisioning and proof from a real coding child remain separate post-deploy gates, not evidence supplied by this release review.

Review run ID and run permalink were not exposed to me; I can’t report them reliably. PR #2417.

[github-actions]

Auto-approved: coreplane-switchboard[bot] reviewed this PR and posted an LGTM verdict (see its review). This repository opted in through its REVIEW_BOT_LOGIN and REVIEW_BOT_ID variables.

[coreplane-switchboard]

LGTM: Release metadata is internally consistent at the assigned PR head; requested SHA and deploy-target count do not match the live PR.

Note

Approved · head 0f14965 · no findings

Full review

I approved the release metadata at 0f14965, not at the requested 3f3aa96. The checkout and PR #2417 both identify 0f14965 as the head, so this verdict does not approve 3f3aa96.

The reviewed head contains #2413, #2418, #2419 and #2407. Its CI and CodeQL checks are green, but the deploy-target comment says bot and resident (2 of 4 Workers), not bot only. #2407 remains disabled local account-link consent, not a live cutover. Depot credential provisioning and real-child proof remain post-deploy gates.

Run ID and run permalink were not available to me; I cannot report them reliably.

[github-actions]

Auto-approved: coreplane-switchboard[bot] reviewed this PR and posted an LGTM verdict (see its review). This repository opted in through its REVIEW_BOT_LOGIN and REVIEW_BOT_ID variables.

[coreplane-infra]

🤖 Created releases:

• v1.266.0

🌻