Skip to content

chore: R-16 toolchain pin + reconciliation - #39

Merged
hyperpolymath merged 11 commits into
mainfrom
r16-reconcile-2026-08-28
Aug 28, 2026
Merged

chore: R-16 toolchain pin + reconciliation#39
hyperpolymath merged 11 commits into
mainfrom
r16-reconcile-2026-08-28

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Aug 28, 2026

Copy link
Copy Markdown
Owner

Owner rulings R-16/R-20/R-21/R-24 (2026-08-28): keep the .tool-versions -> .mise.toml pin conversion, revert the rest of the template-sync sweep, reconcile and publish local history. Direct push blocked by ruleset; merged with --admin per standing practice.

🤖 Generated with Claude Code

hyperpolymath and others added 11 commits July 26, 2026 14:50
@hyperpolymath
chore: estate-wide security compliance
0f964ff
@hyperpolymath
chore: update guix.scm from squisher-corpus
57c5707
@hyperpolymath
test: add pilot Idris2 and Elixir zigzag tests
62b8068
@hyperpolymath @mistral-vibe
fix(ci): remove erroneous squisher-corpus guix.scm placeholder
b6d9d85 
Part of estate-wide standards#426 remediation - cleanup.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@hyperpolymath @mistral-vibe
fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3…
c83256c 
…e87a5923fdf329

Part of estate-wide standards#426 remediation - Batch 11 SHA update.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@hyperpolymath @mistral-vibe
fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3…
72fe699 
…e87a5923fdf329

Part of estate-wide standards#426 remediation - Batch 13 SHA update.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@hyperpolymath @mistral-vibe
fix(ci): add required permissions for reusable workflows (Bug B)
9474b36 
Add security-events: write and id-token: write to workflow-level
permissions in scorecard.yml for scorecard-reusable.yml calls.
Ensure contents: read at workflow-level for secret-scanner.yml.

Part of hyperpolymath/standards#426 remediation - Batch 2.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@hyperpolymath @mistral-vibe
chore(ci): bump standards reusable pins to fix Bug A and Bug B (#426)
a7b78f7 
Update reusable workflow SHA from d135b05 to f2f8e6791b09f1f498f01b798e4670a1ebc9c986
to pick up fixes for:
- Bug A: Invalid timeout-minutes at workflow_call level and duplicates
- Bug B: Permissions escalation in scorecard-reusable

Part of hyperpolymath/standards#426 remediation.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@hyperpolymath @mistral-vibe
chore(ci): bump standards reusable pins to 5b1d0022 (#426)
4025d92 
Final SHA update for Bug A and Bug B fixes.
Part of hyperpolymath/standards#426 remediation.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@hyperpolymath @claude
chore(toolchain): keep .tool-versions -> .mise.toml pin conversion (R…
05c8f41 
…-16)

Owner ruling 2026-08-28 (R-16/R-20/R-21): keep the pin conversion from the
template-sync sweep, revert the rest. Pin content verified against
HEAD:.tool-versions before commit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@hyperpolymath @claude
chore: reconcile local history with origin (R-16/R-24)
88e6ac6 
Owner rulings R-24 + R-28a (2026-08-28): full reconciliation - merge the advanced
remote and publish local history. Workflow conflicts resolved origin-side per
R-28a; discarded local hunks recorded in the forensics diff report.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Aug 28, 2026 •
edited
Loading

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 982b7304-c45e-4b2b-a462-9b7f568e2230

📥 Commits

Reviewing files that changed from the base of the PR and between d9ed06b and 88e6ac6.

📒 Files selected for processing (2)
  • .mise.toml
  • .tool-versions
💤 Files with no reviewable changes (1)
  • .tool-versions

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details
⏰ Context from checks skipped due to timeout. (1)
  • GitHub Check: Codacy Static Code Analysis
🔇 Additional comments (1)
.mise.toml (1)

2-2: 🔒 Security & Privacy

TLS/DTLS reachability is not established.

Erlang/OTP 28.3.1 is affected by CVE-2026-58227, fixed in 28.5.0.4 and later. Repository evidence does not establish that this project or a deployment consumer uses Erlang’s ssl application for TLS/DTLS handshakes. Do not raise a major issue from .mise.toml alone.

📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Added a centralised configuration for the required Erlang and Elixir runtime versions.
    • Removed the previous runtime version declarations from the legacy configuration file.

Walkthrough

The project now pins Erlang and Elixir versions in .mise.toml. The previous .tool-versions entries were removed.

Changes

Runtime version configuration

Layer / File(s) Summary
Mise runtime pins
.mise.toml, .tool-versions		 .mise.toml pins Erlang 28.3.1 and Elixir 1.19.5-otp-28. .tool-versions is emptied.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 88e6a

This PR makes a localized toolchain pin conversion, and no actionable merge-blocking risk remains after normal checks and review.

Poem

A rabbit checks the tools today
Erlang and Elixir now know the way
Mise holds the versions tight
Old pins vanish from sight
Soft paws approve the tidy file �

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly identifies the toolchain pin conversion and reconciliation as the main changes.
Description check ✅ Passed The description directly relates to the toolchain pin conversion, reverted template-sync changes, and history reconciliation.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@gitar-bot

gitar-bot Bot commented Aug 28, 2026

Copy link
Copy Markdown

Important

You are using the Gitar free plan. Upgrade to unlock code review, CI analysis, auto-apply, custom automations, and more.

Gitar

@codacy-production

codacy-production Bot commented Aug 28, 2026

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

@hyperpolymath
hyperpolymath merged commit 1e3c115 into main Aug 28, 2026
14 checks passed
@hyperpolymath
hyperpolymath deleted the r16-reconcile-2026-08-28 branch August 28, 2026 07:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@coderabbitai coderabbitai[bot] coderabbitai[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath