Repository navigation
deps.lock: v2.26.0 pins (tools, fast-browser 0.1.18) - #927
Conversation
…4.22.1, cloudflared 2026.10.3, portless 0.15.9 Each sha256 checked against upstream's published checksum (cloudflared and portless against the GitHub asset digest and npm shasum). setup-bun and packageManager follow bun to 1.4.4. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
Warning Review limit reachedYour organization has reached its usage spending cap. Adjust your spending cap in the billing tab. Next included review available in 49 minutes. View limit details
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info
📝 Walkthrough
Merge Risk: ⚪ Minimal · up to
|
| Check name | Status | Explanation |
|---|---|---|
| Description Check |  |
Check skipped - CodeRabbit’s high-level summary is enabled. |
| Title check | |
The title clearly identifies the dependency lockfile pin updates for the v2.26.0 release, including the tools and fast-browser versions. This matches the stated pull request objective. |
| Docstring Coverage | |
No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0… |
| Linked Issues check | |
Check skipped because no linked issues were found for this pull request. |
| Out of Scope Changes check | |
Check skipped because no linked issues were found for this pull request. |
Full details: Docstring Coverage
-
Explanation
No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (6 skipped: 6 unsupported.)
✨ Finishing Touches
-
🧪 Generate unit tests (beta)
-
- Commit to this branch
- Create a new PR
-
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Comment @coderabbitai help to get the list of available commands.
![macroscopeapp[bot]](https://avatars.githubusercontent.com/in/900172?s=60&v=4){kind=small}
ApprovabilityVerdict: Needs Human Approval Macroscope's review found this PR requires human approval — This refresh updates the production bundle to fast-browser 0.1.18, whose referenced upstream changes add saved-login authentication hints and alter Codex configuration/setup behavior. Because those user-facing authentication paths are activated through the dependency and marketplace pins, they warrant human review beyond a routine version bump. Notes:
You can add or adjust custom eligibility rules. Learn more. |
sha256 taken from the npm tarball, whose sha1 matches npm's dist.shasum. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Dismissing prior approval to re-evaluate f763c22
Brings every stale preflight row current before the v2.26.0 cut. Matt ruled each row a cut.
What changed
Tools (
rt-tray/deps.lock)setup-bunin every workflow,packageManagerand the apps CI rule follow bun to 1.4.4Fast Browser
deps.lockand the catalog pin atc4eb6ff25aa2(sha256 from the npm tarball; its sha1 matches npm's dist.shasum)Verification
rt release preflightreruns after merge and must show every row current.🤖 Generated with Claude Code
Note
Bump Bun to 1.4.4 and update v2.26.0 dependency pins
setup-bunfrom 1.4.3 to 1.4.4 across all CI jobs in checks.yml, e2e.yml, release.yml, and timings.yml, plus the documented rule in apps-ci-and-publishing.mdpackageManagerfield in package.json to Bun 1.4.4 and refreshes rt-tray/deps.lock with v2.26.0 pins, including fast-browser 0.1.18packageManagermay mismatchMacroscope summarized f763c22.
Summary by CodeRabbit