Skip to content

chore(deps): integrate reviewed updates and catalog refresh for 4.89.12 - #169

Open
CruxExperts wants to merge 15 commits into
mainfrom
integration/dependency-updates-4.89.11
Open

CruxExperts wants to merge 15 commits into
mainfrom
integration/dependency-updates-4.89.11

Conversation

@CruxExperts

@CruxExperts CruxExperts commented Nov 2, 2026 •

Copy link
Copy Markdown
Owner

Summary

  • Integrate the reviewed dependency changes from chore(deps): bump astral-sh/setup-uv from 10.3.2 to 10.3.3 in the github-actions group #167 and chore(deps): bump the project-python group with 8 updates #168, including the required SDK and S3 dependency exports, without replaying duplicate source commits.
  • Keep the setup-uv action revision separate from the selected uv tool version.
  • Add source-bound 4.89.12 release guidance and canonical version/generated-document synchronization.
  • Refresh the existing routing catalog after re-reviewing all seven official sources; preserve candidate policy, active client model configuration, integrity checks and fail-closed expiry.
  • Retain bounded native viewer, theme-preview and private authentication-dialog diagnostics without changing runtime handling, security assertions or existing UI deadlines. Concurrent retained-status observations handle only bounded busy responses with effect=none. Diagnostics do not establish a fix for unproven hosted presentation failures.

Verification

  • Accepted source: 5,993 tests passed and 3 skipped in the guarded full suite.
  • Focused S3/SDK dependency checks: 10 passed; offline consumer smoke checks passed.
  • Focused routing and isolated native-dialog validation: 76 passed. The actual selector command returned a reviewed lane.
  • The isolated native UI-refresh and concurrent-family scenarios both passed with visible-control, retention and cleanup assertions intact.
  • The inclusive-expiry regression uses authentic catalog bytes and proves acceptance on the expiry date and rejection afterward.
  • Canonical publish preflight passed with a clean worktree, aligned version/generated documents and zero release-documentation findings.
  • All outgoing commits have verified OpenPGP signatures; exact-final-head hosted checks remain required before main promotion.

Integration

Preserve the source, documentation, and version-sync ancestry. Promote the exact signed candidate only after its required GitHub checks succeed. The original Dependabot pull requests will be reconciled after main integration is verified.

Copilot AI balanced review requested due to automatic review settings November 2, 2026 23:14
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ⚠️ Failed 2026-11-02T23:14:08.229211Z
We couldn’t complete this review. Comment @codex review to try again.
c5c9ed1 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

@github-actions github-actions Bot added area/docs Documentation or generated docs area/release Affected repository area status/needs-triage Triage status type/pr Issue or PR type labels Nov 2, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues block approval of the dependency and release-documentation updates.

No open issues 🎉

What changed in this PR

This PR integrates the dependency updates from #167 and #168 into LocalSetup 4.89.11, aligning CI bootstrap pins, packaged dependency exports, and release documentation.

Changes:

  • Updates setup-uv to an immutable v10.3.3 revision while retaining uv 0.11.21.
  • Updates Python dependencies and synchronizes hash-pinned SDK and optional S3 exports.
  • Adds 4.89.11 release guidance and refreshes version references and generated documentation provenance.

No actionable findings.

File Description
VERSION Sets framework version to 4.89.11.
uv.lock Updates resolved dependencies and framework version.
README.md Updates release highlights and version references.
pyproject.toml Updates framework version and optional Boto3 pin.
ls/​skills/​ls-garage-s3-admin/​requirements-s3-sdk.txt Refreshes hashed Boto3 and botocore requirements.
ls/​skills/​ls-backblaze-b2-storage/​requirements-s3-sdk.txt Refreshes hashed Boto3 and botocore requirements.
ls/​README.md Updates engine version and release link.
ls/​docs/​WORKFLOW_REGISTRY.md Refreshes generated version and provenance.
ls/​docs/​WORKFLOW_QUICK_REF.md Refreshes generated version and provenance.
ls/​docs/​VERSIONING.md Updates the documented current version.
ls/​docs/​SKILLS.md Refreshes catalog version and provenance.
ls/​docs/​REPO_MAINTENANCE.md Documents dependency integration and export checks.
ls/​docs/​releases/​4.89.11.md Adds compatibility, update, and verification guidance.
ls/​docs/​releases/​4.89.11.json Adds the source-bound release content record.
ls/​docs/​README.md Updates version facts and release link.
ls/​docs/​migration/​skill-alias-map.md Refreshes generated version and provenance.
ls/​docs/​FEATURES.md Updates the generated version fact.
ls/​docs/​_generated/​workflow-catalog.json Refreshes catalog provenance.
ls/​docs/​_generated/​skill-taxonomy.json Refreshes taxonomy provenance.
ls/​docs/​_generated/​skill-packs.md Refreshes pack documentation provenance.
ls/​docs/​_generated/​skill_aliases.json Refreshes alias metadata provenance.
ls/​docs/​_generated/​plugin-packs.md Refreshes plugin documentation provenance.
ls/​docs/​_generated/​plugin-packs.json Refreshes plugin catalog provenance.
ls/​docs/​_generated/​platform-adapters.md Refreshes adapter documentation provenance.
ls/​docs/​_generated/​implementation-file-map.md Includes the new release files and refreshes provenance.
ls/​docs/​_generated/​facts.json Updates version facts and provenance.
ls/​docs/​_generated/​docs-truth-map.json Updates release inventory, version facts, and provenance.
ls/​docs/​_generated/​docs-inventory.json Registers the release guide and updates counts.
ls/​docs/​_generated/​docs-audit-result.json Refreshes audit-result provenance.
ls/​docs/​_generated/​docs-asset-manifest.json Refreshes asset-manifest provenance.
ls/​docs/​_generated/​docs-alignment-summary.md Updates version, document count, and provenance.
ls/​docs/​_generated/​artifact-registry.json Refreshes artifact hashes and source metadata.
ls/​core/​s3_sdk/​exports.py Aligns the export guard with Boto3 1.43.122.
ls/​config/​sdk-runtime.lock Refreshes hash-pinned runtime dependencies.
ls/​config/​sdk-dependency-receipt.json Updates runtime-lock and source integrity hashes.
.github/​workflows/​qc-release.yml Updates the setup-uv action pin.
.github/​workflows/​qc-pr-review.yml Updates the setup-uv action pin.
.github/​workflows/​qc-patrol.yml Updates the setup-uv action pin.
.github/​workflows/​qc-docs-drift.yml Updates the setup-uv action pin.
.github/​workflows/​qc-ci.yml Updates the setup-uv action pin.
.github/​workflows/​qc-autofix.yml Updates the setup-uv action pin.
.github/​workflows/​publish.yml Updates setup-uv pins in publication jobs.
.github/​workflows/​provenance-refresh.yml Updates the setup-uv action pin.
.github/​workflows/​pr-validation.yml Updates setup-uv pins across validation jobs.
.github/​workflows/​docs-sync.yml Updates the setup-uv action pin.

Review effort: Balanced

@CruxExperts CruxExperts changed the title chore(deps): integrate reviewed updates for 4.89.11 chore(deps): integrate reviewed updates and catalog refresh for 4.89.12 Nov 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/docs Documentation or generated docs area/release Affected repository area status/needs-triage Triage status type/pr Issue or PR type

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants