Commit Graph

  • c281e17d7f
    fix: fall back to repo default_branch instead of hardcoded "main" (#1143) Ashwin Bhat 2026-04-01 14:48:46 -07:00
  • 408a40e7c2
    Pin Claude Code to 2.1.87 (#1142) v1.0.84 Ashwin Bhat 2026-04-01 11:29:30 -07:00
  • bee87b3258 chore: bump Claude Code to 2.1.89 and Agent SDK to 0.2.89 v1.0.83 GitHub Actions 2026-04-01 01:13:44 +00:00
  • 32156b120b
    Add subprocess isolation setup and git credential helper (#1132) Octavian Guzu 2026-03-31 12:36:51 +01:00
  • 7225f045c6 chore: bump Claude Code to 2.1.88 and Agent SDK to 0.2.88 GitHub Actions 2026-03-31 00:35:26 +00:00
  • 88c168b39e chore: bump Claude Code to 2.1.87 and Agent SDK to 0.2.87 v1.0.82 GitHub Actions 2026-03-29 02:29:10 +00:00
  • e7b588b6ea chore: bump Claude Code to 2.1.86 and Agent SDK to 0.2.86 v1.0.81 GitHub Actions 2026-03-27 21:50:59 +00:00
  • 094bd24d57 chore: bump Claude Code to 2.1.85 and Agent SDK to 0.2.85 v1.0.80 GitHub Actions 2026-03-26 22:51:40 +00:00
  • 3ac52d0da9 chore: bump Claude Code to 2.1.84 and Agent SDK to 0.2.84 v1.0.79 GitHub Actions 2026-03-26 00:37:42 +00:00
  • 0ee1beea58 chore: bump Claude Code to 2.1.83 and Agent SDK to 0.2.83 v1.0.78 GitHub Actions 2026-03-25 06:35:03 +00:00
  • ff9acae588
    Auto-set subprocess env scrub when allowed_non_write_users is configured (#1093) v1.0.77 Octavian Guzu 2026-03-23 12:10:02 +00:00
  • 6062f37096 chore: bump Claude Code to 2.1.81 and Agent SDK to 0.2.81 v1.0.76 GitHub Actions 2026-03-20 22:30:13 +00:00
  • df37d2f076 chore: bump Claude Code to 2.1.79 and Agent SDK to 0.2.79 v1.0.75 GitHub Actions 2026-03-18 22:39:18 +00:00
  • 1ba15be4f0
    Remove redundant git status/diff/log from tag mode allowlist (#1075) v1.0.74 David Dworken 2026-03-18 09:06:33 -07:00
  • 9ddce40de8
    Restore .claude/ and .mcp.json from PR base branch before CLI runs (#1066) kashyap murali 2026-03-18 09:00:18 -07:00
  • 1b422b3517 chore: bump Claude Code to 2.1.78 and Agent SDK to 0.2.77 v1.0.73 GitHub Actions 2026-03-17 23:47:59 +00:00
  • 72a5802bde
    Close remaining gaps in .mcp.json change protection ashwin/disable-mcp-json-on-pr-change Kashyap Murali 2026-03-17 12:24:27 -07:00
  • 4c044bb2f5 chore: bump Claude Code to 2.1.77 and Agent SDK to 0.2.77 GitHub Actions 2026-03-17 00:33:47 +00:00
  • cd77b50d2b chore: bump Claude Code to 2.1.76 and Agent SDK to 0.2.76 v1.0.72 GitHub Actions 2026-03-14 01:29:31 +00:00
  • 0e80d3c5b8 chore: bump Claude Code to 2.1.75 and Agent SDK to 0.2.75 GitHub Actions 2026-03-13 17:07:33 +00:00
  • f956510b1a
    Harden tag mode tool permissions against prompt injection (#1002) kashyap murali 2026-03-12 13:35:17 -07:00
  • 5d0cc745cd
    feat(inline-comment): add confirmed param + probe-pattern safety net (#1048) v1.0.71 kashyap murali 2026-03-12 00:12:55 -07:00
  • 567be3da98 chore: bump Claude Code to 2.1.73 and Agent SDK to 0.2.73 GitHub Actions 2026-03-11 18:33:26 +00:00
  • eb99fb38f0 chore: bump Claude Code to 2.1.72 and Agent SDK to 0.2.72 GitHub Actions 2026-03-10 00:49:35 +00:00
  • 33fbb80626
    docs: warn that allowed_bots can expose the action to external triggers (#1039) dustin 2026-03-09 13:04:11 -07:00
  • 3428ca8991 chore: bump Claude Code to 2.1.71 and Agent SDK to 0.2.71 GitHub Actions 2026-03-07 00:11:30 +00:00
  • 26ec041249 chore: bump Claude Code to 2.1.70 and Agent SDK to 0.2.70 v1.0.70 GitHub Actions 2026-03-06 01:18:43 +00:00
  • 1fc90f3ed9 chore: bump Claude Code to 2.1.69 and Agent SDK to 0.2.69 v1.0.69 GitHub Actions 2026-03-05 00:24:53 +00:00
  • e763fe78de chore: bump Claude Code to 2.1.68 and Agent SDK to 0.2.68 v1.0.68 GitHub Actions 2026-03-04 10:09:58 +00:00
  • 5f8e5bfe5b chore: bump Claude Code to 2.1.66 and Agent SDK to 0.2.66 v1.0.67 GitHub Actions 2026-03-04 01:17:58 +00:00
  • 73367208d0
    Improve gh.sh wrapper: stricter validation and better error messages (#996) Octavian Guzu 2026-03-02 16:38:23 +00:00
  • 64c7a0ef71
    Only expose permission_denials count in sanitized output (#993) v1.0.66 David Dworken 2026-03-02 01:21:16 -08:00
  • 220272d388
    Change the default display_report option to false to restrict exposed data (#992) v1.0.65 David Dworken 2026-03-01 21:57:53 -08:00
  • ba7fa4bcf0 chore: bump Claude Code to 2.1.63 and Agent SDK to 0.2.63 v1.0.64 GitHub Actions 2026-02-28 03:51:01 +00:00
  • 1dd74842e5 chore: bump Claude Code to 2.1.61 and Agent SDK to 0.2.61 v1.0.63 GitHub Actions 2026-02-26 22:39:58 +00:00
  • 273fe82540 chore: bump Claude Code to 2.1.59 and Agent SDK to 0.2.59 v1.0.62 GitHub Actions 2026-02-26 01:05:07 +00:00
  • e750645f1b
    Add gh.sh wrapper for gh CLI commands in workflows (#975) Octavian Guzu 2026-02-25 20:42:29 +00:00
  • cd4b150a2a chore: bump Claude Code to 2.1.58 and Agent SDK to 0.2.58 v1.0.61 GitHub Actions 2026-02-25 20:04:44 +00:00
  • ade221fd1c chore: bump Claude Code to 2.1.56 and Agent SDK to 0.2.56 v1.0.60 GitHub Actions 2026-02-25 06:37:46 +00:00
  • 48fe7dd592 chore: bump Claude Code to 2.1.55 and Agent SDK to 0.2.55 v1.0.59 GitHub Actions 2026-02-25 03:21:10 +00:00
  • 6ae1b29ba2 chore: bump Claude Code to 2.1.53 and Agent SDK to 0.2.53 v1.0.58 GitHub Actions 2026-02-25 00:18:46 +00:00
  • 7af3506741
    Add non-write users check workflow (#973) Octavian Guzu 2026-02-24 19:47:33 +00:00
  • 35a9e0292d chore: bump Claude Code to 2.1.52 and Agent SDK to 0.2.52 v1.0.57 GitHub Actions 2026-02-24 06:44:55 +00:00
  • fa3312a107 chore: bump Claude Code to 2.1.51 and Agent SDK to 0.2.51 v1.0.56 GitHub Actions 2026-02-24 01:47:14 +00:00
  • dd8541688d
    Use wrapper script for label operations in issue triage (#968) Octavian Guzu 2026-02-23 17:16:07 +00:00
  • edd85d6153 chore: bump Claude Code to 2.1.49 and Agent SDK to 0.2.49 v1.0.55 GitHub Actions 2026-02-19 23:33:09 +00:00
  • 0cf5eeec4f chore: bump Claude Code to 2.1.47 and Agent SDK to 0.2.47 v1.0.54 GitHub Actions 2026-02-18 21:44:15 +00:00
  • e6cb7a7ce3 chore: bump Claude Code to 2.1.45 and Agent SDK to 0.2.45 GitHub Actions 2026-02-17 18:58:59 +00:00
  • 2f8ba26a21 chore: bump Claude Code to 2.1.44 and Agent SDK to 0.2.44 v1.0.53 GitHub Actions 2026-02-16 21:40:14 +00:00
  • cc5ef44546
    feat: add display_report option to disable step summary (#952) Ashwin Bhat 2026-02-15 15:49:49 -08:00
  • 7e477675d1 docs: add a joke to the README claude/issue-951-20260215-2314 claude[bot] 2026-02-15 23:15:41 +00:00
  • f6a1c4c1b4
    fix: grant write permissions and use @main in claude workflow (#950) Ashwin Bhat 2026-02-15 15:13:59 -08:00
  • ece24efbb4
    debug: add logging to credential clearing ashwin/fix-git-credentials Ashwin Bhat 2026-02-15 15:00:51 -08:00
  • fea6d7077e
    fix: clear actions/checkout includeIf credential configs Ashwin Bhat 2026-02-15 14:54:33 -08:00
  • 68cfeead18
    Revert "fix: replace deprecated :* with modern * wildcard in git permissions (#929)" (#949) v1.0.52 Ashwin Bhat 2026-02-15 14:39:25 -08:00
  • f4ac33b9a4
    Fix pagination bypass and fail-open bugs in .mcp.json change detection Ashwin Bhat 2026-02-15 12:44:24 -08:00
  • 19a4f34b17
    Disable auto-approval of project MCP servers when .mcp.json changes in PR Ashwin Bhat 2026-02-13 22:41:07 +00:00
  • f5088835af
    Fix stale claudeCodeVersion in run.ts and update bump automation (#943) Ashwin Bhat 2026-02-13 15:12:56 -08:00
  • ea36d6abde chore: bump Claude Code to 2.1.42 and Agent SDK to 0.2.42 v1.0.51 GitHub Actions 2026-02-13 19:55:13 +00:00
  • cc19ae6bba fix: simplify matching to header-only, drop bot ID check tosinaf/sticky-job-isolation Tosin Afolabi 2026-02-13 10:17:12 -05:00
  • 3128a645ab fix: don't require bot ID match when header is present Tosin Afolabi 2026-02-13 10:15:19 -05:00
  • 600162b09b refactor: align sticky comment isolation with PR #780 patterns Tosin Afolabi 2026-02-13 09:54:52 -05:00
  • 263b3b725a feat: isolate sticky comments by job ID to prevent workflow conflicts Tosin Afolabi 2026-02-13 08:23:15 -05:00
  • c22f7c3f9d
    revert: undo PR checkout fork support and unique branch naming (#937) v1.0.50 Ashwin Bhat 2026-02-12 09:45:01 -08:00
  • f669191d7d
    fix: use unique local branch names for PR checkout to avoid conflicts (#931) v1.0.49 Yi-Cheng Wang 2026-02-12 11:30:25 +08:00
  • 66d04425ea
    fix: address review feedback - assert warning in test and improve guidance in warning message oct/skip-ci-server-without-permission Octavian Guzu 2026-02-11 19:03:11 +00:00
  • 8c383c5de3
    fix: skip CI MCP server installation when actions:read permission is missing (#933) Octavian Guzu 2026-02-11 19:02:49 +00:00
  • a3fea12aea
    fix: skip CI MCP server installation when actions:read permission is missing Octavian Guzu 2026-02-11 18:54:39 +00:00
  • 1bb0e7464b
    fix: replace deprecated :* with modern * wildcard in git permissions (#929) Dave-London 2026-02-11 07:26:10 +02:00
  • 23ed4cb53d chore: bump Claude Code to 2.1.39 and Agent SDK to 0.2.39 v1.0.48 GitHub Actions 2026-02-10 23:10:22 +00:00
  • 21e3fe0542
    Fix PR checkout to support fork PRs (#851) Sol Redfern 2026-02-11 01:52:32 +09:00
  • b433f16b30 chore: bump Claude Code to 2.1.38 and Agent SDK to 0.2.38 v1.0.47 GitHub Actions 2026-02-10 00:52:13 +00:00
  • 7695f7866a
    fix: skip dev dependencies in CI install step (#919) Dave-London 2026-02-09 20:09:41 +02:00
  • d5b01b6843
    Update claude-opus-4-5 to claude-opus-4-6 in workflow (#909) Ashwin Bhat 2026-02-07 14:18:08 -08:00
  • 6c61301d8e chore: bump Claude Code to 2.1.37 and Agent SDK to 0.2.37 v1.0.46 GitHub Actions 2026-02-07 19:08:42 +00:00
  • db388438c1 chore: bump Claude Code to 2.1.36 and Agent SDK to 0.2.36 GitHub Actions 2026-02-07 18:00:59 +00:00
  • b113f49a56 chore: bump Claude Code to 2.1.33 and Agent SDK to 0.2.33 v1.0.45 GitHub Actions 2026-02-06 01:46:07 +00:00
  • 7057f3318b
    refactor: simplify mode system by removing Mode interface and registry (#899) Ashwin Bhat 2026-02-05 17:22:30 -08:00
  • f09dc9a6a3
    fix: use original body from webhook payload for TOCTOU hardening (#904) David Dworken 2026-02-05 10:54:51 -08:00
  • 006aaf2935 chore: bump Claude Code to 2.1.32 and Agent SDK to 0.2.32 v1.0.44 GitHub Actions 2026-02-05 17:46:38 +00:00
  • 9a3c761f54
    refactor: unify action into single composite step with run.ts entrypoint (#898) Ashwin Bhat 2026-02-03 20:09:43 -08:00
  • 87d760a977
    fix: address PR review feedback ashwin/unified-entrypoint Ashwin Bhat 2026-02-03 18:53:35 -08:00
  • 0f45be3f67
    fix: address PR review feedback Ashwin Bhat 2026-02-03 18:50:20 -08:00
  • 6e5825aa53
    refactor: keep SSH signing cleanup and token revocation as separate action steps Ashwin Bhat 2026-02-03 18:43:46 -08:00
  • 3d8ead909f
    refactor: unify action into single composite step with run.ts entrypoint Ashwin Bhat 2026-02-03 18:31:12 -08:00
  • 6867bb3ab0 chore: bump Claude Code to 2.1.31 and Agent SDK to 0.2.31 v1.0.43 GitHub Actions 2026-02-04 00:42:58 +00:00
  • 98af40b63c chore: bump Claude Code to 2.1.30 and Agent SDK to 0.2.30 v1.0.42 GitHub Actions 2026-02-03 18:04:51 +00:00
  • 4ce5f178c2
    fix: pass GitHub token to setup-bun to avoid rate limits (#861) Jean-Eudes Peloye 2026-02-01 23:09:41 +01:00
  • fab4258c6e
    fix: pass OpenTelemetry environment variables to Claude Code subprocess (#886) Sangyeon Cho 2026-02-02 07:01:29 +09:00
  • 70e16deb18 chore: bump Claude Code to 2.1.29 and Agent SDK to 0.2.29 v1.0.41 GitHub Actions 2026-01-31 23:36:46 +00:00
  • 0ed5eeaa54 chore: bump Claude Code to 2.1.27 and Agent SDK to 0.2.27 v1.0.40 GitHub Actions 2026-01-30 20:37:50 +00:00
  • 01e756b34e chore: bump Claude Code to 2.1.25 and Agent SDK to 0.2.25 v1.0.39 GitHub Actions 2026-01-29 21:12:19 +00:00
  • ff34ce0ff0 chore: bump Claude Code to 2.1.23 and Agent SDK to 0.2.23 v1.0.38 GitHub Actions 2026-01-29 01:08:45 +00:00
  • 2817c54db8 chore: bump Claude Code to 2.1.22 and Agent SDK to 0.2.22 v1.0.37 GitHub Actions 2026-01-28 06:58:50 +00:00
  • d01eedd981
    Revert "chore: bump Claude Code to 2.1.21 and Agent SDK to 0.2.21" (#869) Ashwin Bhat 2026-01-27 20:44:28 -08:00
  • f9388bed59
    feat: enable show_full_output in structured output tests ashwin/add-show-full-output-to-structured-output-tests Ashwin Bhat 2026-01-27 19:34:31 -08:00
  • 49046e0709 chore: bump Claude Code to 2.1.21 and Agent SDK to 0.2.21 GitHub Actions 2026-01-28 02:24:23 +00:00
  • 32ac7269f2
    Revert "Revert "feat: send additional_permissions in token exchange request (…" (#866) Ashwin Bhat 2026-01-27 14:35:18 -08:00
  • d090d03da6
    Reapply "feat: send additional_permissions in token exchange request (#859)" (#864) ashwin/unrevert-additional-permissions Ashwin Bhat 2026-01-27 08:50:24 -08:00
  • fe72061e16
    feat: add actor-based comment filtering to GitHub data fetching (#812) Rani Halabi 2026-01-27 17:48:10 +02:00