From da1e746451b3e2ebb10a529534500723b461fdd7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 12 Sep 2026 03:22:48 +0000 Subject: [PATCH 1/2] build(deps): bump interprocess from 2.4.3 to 2.4.4 in /cli Bumps [interprocess](https://github.com/kotauskas/interprocess) from 2.4.3 to 2.4.4. - [Release notes](https://github.com/kotauskas/interprocess/releases) - [Commits](https://github.com/kotauskas/interprocess/compare/2.4.3...2.4.4) --- updated-dependencies: - dependency-name: interprocess dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- cli/Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cli/Cargo.lock b/cli/Cargo.lock index 3eb028b8..df2fa1fa 100644 --- a/cli/Cargo.lock +++ b/cli/Cargo.lock @@ -432,9 +432,9 @@ dependencies = [ [[package]] name = "interprocess" -version = "2.4.3" +version = "2.4.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "798de1433ba514cc6c04c4144c2469af81396e4906195218737c776d47769572" +checksum = "6cb02ffbf25e8ef0f4a95bff054eef75f6d1bf16919474cf2caa63b21997478a" dependencies = [ "doctest-file", "libc", From c1f6bd947c249d7fb52969f170b8118751da6743 Mon Sep 17 00:00:00 2001 From: skymanbp <57272723+skymanbp@users.noreply.github.com> Date: Sat, 12 Sep 2026 13:33:46 -0400 Subject: [PATCH 2/2] deps: interprocess 2.4.4 in both lockfiles, NOTICE regenerated, the bench faces say this tree is a new program Dependabot #11 moved cli/Cargo.lock to interprocess 2.4.4 (the daemon's named-pipe IPC crate). Upstream 2.4.3 -> 2.4.4 is docs and packaging only: a typo, a dead link, and checks-and-tests.py excluded from the package (#98); the dependency sections of the two manifests are byte-identical and windows-sys stays at 0.61. gui/src-tauri/Cargo.lock follows by hand (version + checksum, two lines), the way dependabot moved the cli lock: `cargo update -p interprocess --precise 2.4.4` also re-picks windows-sys for seven unrelated packages (cargo unlocks the named package's dependency subtree and prefers the versions still locked for the rest), wider than this bump warrants. Both lockfiles pass `cargo metadata --locked`; NOTICE regenerated (one line). The seven bench faces (README en/zh, docs/BENCH.md, both homepages, both bench pages) now say v1.7.2 "earns a row and does not have one yet": cli/Cargo.lock is a build input (bench_support/joins.rs), so a lock line that is not a version stamp makes this tree a different program from the newest measured row, and the next release joins the series. That is what turned the PR's first CI run red (four bench gates plus the NOTICE gate, on all three platforms). Verdicts, scores, schema ids and the wire are untouched. CHANGELOG block under [Unreleased] (655 -> 662); ADR-006 named re-establishment (0 over, 0 drawn; check 944 / dedup 55 / scan 0 fail, sub-repo 983 / 119 / 0); lib 373; it 397 + 2 legs only a worktree fails (layout_tree wants .ccm/, docs_diagrams wants the archify cache) - CI is the reader for those two. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01ES1xJgjH4z6fV6p7zS4ssX --- CHANGELOG.md | 7 +++++++ NOTICE | 2 +- README.md | 2 +- README.zh.md | 2 +- ce-baseline.json | 2 +- docs/BENCH.md | 2 +- gui/src-tauri/Cargo.lock | 4 ++-- site/bench/index.html | 2 +- site/index.html | 2 +- site/zh/bench/index.html | 2 +- site/zh/index.html | 2 +- 11 files changed, 18 insertions(+), 11 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 354fa7dc..f7551c40 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -13,6 +13,13 @@ - **`plugin/hooks/hooks.json` 顶层那个说明键改名 `description`**：Claude Code 从 2.1.267 起按白名单核该文件的顶层键（`description` / `hooks` / `modules` / `surface`；本机留存的三个二进制实测：2.1.266 无此检查，2.1.267 与 2.1.269 有；其 changelog 未记），不在名单的键每次开会话点名一次后忽略。原键 `_why_timeout` 自 2026-08-19（cd11fda）起未动，装机 1.7.2 那份与仓内逐字节同；改名只换键名，说明文字逐字保留、行数不变。三条钩子的接线从未受影响（键被忽略、钩子照常跑），子仓读该文件的三个门（`face_parity` / `facts/count` / `health_plugin`）只读 `hooks` 键。装机上的副本要等下个版本发出并 `claude plugin update` 后才换，此前告警仍在。ADR-006 具名重立：CHANGELOG 651 → 655。 +**无默认档位变更。** dependabot 每周批第二轮（2026-09-12；PR #11 / #12，用户裁「修两行注释后并入」与「现在并、做全套记账」）： + +- **PR #12 `github/codeql-action/upload-sarif` 4.37.9 → 4.38.0**：ci.yml 两处 SARIF 上传 action 的 sha `cdf488f5…` → `b96794f0…`（= v4.38.0 tag 解引用，GitHub API 核过）。dependabot 换 sha 不改行尾注释，两行仍写 v4.37.9 / 2026-09-06 / #7——`.github/` 不在度量宇宙、无门可抓——在 PR 分支补一笔注释提交后合并。 +- **PR #11 `interprocess` 2.4.3 → 2.4.4**（daemon 的命名管道 IPC 库）：上游只改文档与打包——错字、死链、`checks-and-tests.py` 不再入包（免得发行版打包器以为要 Python）；两版 Cargo.toml 的依赖段逐字节同，windows-sys 要求仍是 0.61。gui 锁文件手动同点 2.4.4（version + checksum 两行，两工作区 `cargo metadata --locked` 过）：`cargo update -p interprocess --precise 2.4.4` 会顺带把七个无关包（anstyle-query、anstyle-wincon、dirs-sys、socket2、winapi-util 等）的 windows-sys 引用从 0.61.2 改到 0.60.2 / 0.59.0——cargo 解锁被点名包的依赖子树、其余包偏好仍锁着的版本——比这次升级该动的宽，不采。NOTICE 一行随之再生。 +- **bench 七个面翻成「该有行、tag 后测量」**（README 双语、docs/BENCH.md、两首页、两 bench 页）：`cli/Cargo.lock` 是构建输入（`bench_support/joins.rs` 按内容比、只剔版本戳），锁一动即不再是 v1.7.0 那份被测程序；PR 首跑 CI 的 5 条红（三平台同）正是这四条 bench 门 + NOTICE 门。判决 / 分数算法 / schema id / wire 不变；下个发布按 BENCH.md 入列规则须量一次 bench。 +- 门：主 check 944 / dedup 55 / scan 0 fail（deadcode 0 / docdup 0 / erase 0），子仓 983 / 119 / 0，lib 373、it 399 (12 ign；`layout_tree` / `docs_diagrams` 两腿只在度量用的 worktree 里红——前者要机器本地的 `.ccm/`、后者要 `cli/target/archify` 缓存——CI 为准)，两锁 `--locked` 过；ADR-006 具名重立：CHANGELOG 655 → 662（首页自测块 944 / 尺寸轴 86 不动，无需重 bless）。 + ## [v1.7.2] — 2026-09-10 — GUI 根目录选择器；1.7.1 只到了 Release 与插件的五条渠道在本版补齐 **无默认档位变更。** GUI 读者面（2026-09-10，用户报两条）： diff --git a/NOTICE b/NOTICE index 64c9f6af..8f54893d 100644 --- a/NOTICE +++ b/NOTICE @@ -188,7 +188,7 @@ ignore 0.4.33 — Unlicense OR MIT indexmap 1.9.3 — Apache-2.0 OR MIT indexmap 2.14.0 — Apache-2.0 OR MIT infer 0.19.0 — MIT -interprocess 2.4.3 — 0BSD OR Apache-2.0 +interprocess 2.4.4 — 0BSD OR Apache-2.0 ipnet 2.12.1 — MIT OR Apache-2.0 is_terminal_polyfill 1.70.2 — MIT OR Apache-2.0 itoa 1.0.18 — MIT OR Apache-2.0 diff --git a/README.md b/README.md index 9d5a6989..76f81d3a 100644 --- a/README.md +++ b/README.md @@ -95,7 +95,7 @@ scanned 9 files / 19 functions — 1 warn, 1 fail -> FAIL (failed: hard_line) | p50 ms | 2387 | 1166 | 10293 | 495 | 1408 | 48 | 683 | | p95 ms | 2396 | 2873 | 10326 | 509 | 1428 | 58 | 2622 | -Every value is generated from `contracts/bench/bench.json`; the test rejects hand edits to this block. The current release, v1.7.2, ships the same measured code as the newest row and gets none of its own. [Full replay notes and per-version series](docs/BENCH.md) · [Complete website dashboard](https://codeeraser.dev/bench/) +Every value is generated from `contracts/bench/bench.json`; the test rejects hand edits to this block. The current release, v1.7.2, earns a row and does not have one yet: it is measured after the tag. [Full replay notes and per-version series](docs/BENCH.md) · [Complete website dashboard](https://codeeraser.dev/bench/) Latency rows are release-build replays on one fixed host, comparable version to version only. The precision and recall points are frozen with their evaluation ledgers ([EVAL-SET](docs/EVAL-SET.md)) and rendered on [BENCH](docs/BENCH.md); comparators (jscpd, similarity-*) are named with the exact version measured. diff --git a/README.zh.md b/README.zh.md index 83acf56c..3ba2f47d 100644 --- a/README.zh.md +++ b/README.zh.md @@ -95,7 +95,7 @@ warn invoicer/report.py:1 file-lines = 35（上限 30）[invoicer/report.py] | p50 ms | 2387 | 1166 | 10293 | 495 | 1408 | 48 | 683 | | p95 ms | 2396 | 2873 | 10326 | 509 | 1428 | 58 | 2622 | -所有值均由 `contracts/bench/bench.json` 生成；本块手改会被测试拒绝。当前发布 v1.7.2 与最新一行是同一份被测代码，故没有自己的行。[完整回放说明与逐版本系列](docs/BENCH.md) · [网站完整仪表盘](https://codeeraser.dev/zh/bench/) +所有值均由 `contracts/bench/bench.json` 生成；本块手改会被测试拒绝。当前发布 v1.7.2 该有自己的行，而它在打 tag 之后才被测量，尚未落表。[完整回放说明与逐版本系列](docs/BENCH.md) · [网站完整仪表盘](https://codeeraser.dev/zh/bench/) 延迟行是 release 构建在同一台固定主机上的回放，只做版本间比较。精度与召回点随各自的评估台账冻结（[EVAL-SET](docs/EVAL-SET.md)），渲染在 [BENCH](docs/BENCH.md)；对照工具（jscpd、similarity-*）标明所测的确切版本。 diff --git a/ce-baseline.json b/ce-baseline.json index e9e37c43..3bbf5e50 100644 --- a/ce-baseline.json +++ b/ce-baseline.json @@ -25413,7 +25413,7 @@ [ 17920374367022734992, 0, - 655 + 662 ], [ 17920675998036182998, diff --git a/docs/BENCH.md b/docs/BENCH.md index 1b6aa1de..d8f3839a 100644 --- a/docs/BENCH.md +++ b/docs/BENCH.md @@ -47,7 +47,7 @@ > table cannot gain a row the rule forbids, and a release that earns one > says which of the two reasons it has none yet. -The current release, v1.7.2, ships the same measured code as the newest row and gets none of its own. +The current release, v1.7.2, earns a row and does not have one yet: it is measured after the tag. ## Latency series (self repository) diff --git a/gui/src-tauri/Cargo.lock b/gui/src-tauri/Cargo.lock index 0531db5b..fbcf5f6d 100644 --- a/gui/src-tauri/Cargo.lock +++ b/gui/src-tauri/Cargo.lock @@ -1784,9 +1784,9 @@ dependencies = [ [[package]] name = "interprocess" -version = "2.4.3" +version = "2.4.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "798de1433ba514cc6c04c4144c2469af81396e4906195218737c776d47769572" +checksum = "6cb02ffbf25e8ef0f4a95bff054eef75f6d1bf16919474cf2caa63b21997478a" dependencies = [ "doctest-file", "libc", diff --git a/site/bench/index.html b/site/bench/index.html index 84ba6317..0f501cdb 100644 --- a/site/bench/index.html +++ b/site/bench/index.html @@ -182,7 +182,7 @@

Latency by version · v1.7.0

1.7.0hook_probe485830windows/x86_64/16cpu2026-09-06 1.7.0scan68326225windows/x86_64/16cpu2026-09-06 -

The current release, v1.7.2, ships the same measured code as the newest row and gets none of its own.

+

The current release, v1.7.2, earns a row and does not have one yet: it is measured after the tag.

Frozen evaluation points

diff --git a/site/index.html b/site/index.html index da55bcd9..211aedf1 100644 --- a/site/index.html +++ b/site/index.html @@ -141,7 +141,7 @@

Measured · v1.7.0

guard false positives (630 arbitrated events)0.00 per 500 edits
docdup precision (frozen golden set)17/17 scoped (100%)
-

Every number is produced by replay (cli/tests/it/bench.rs and bench_backfill.rs) from one source, contracts/bench/bench.json — never hand-filled. The current release, v1.7.2, ships the same measured code as the newest row and gets none of its own.

+

Every number is produced by replay (cli/tests/it/bench.rs and bench_backfill.rs) from one source, contracts/bench/bench.json — never hand-filled. The current release, v1.7.2, earns a row and does not have one yet: it is measured after the tag.

Complete evaluation dashboard →

diff --git a/site/zh/bench/index.html b/site/zh/bench/index.html index 8d9c0de9..5ebe83dd 100644 --- a/site/zh/bench/index.html +++ b/site/zh/bench/index.html @@ -181,7 +181,7 @@

逐版本延迟 · v1.7.0

metricvaluesource
docdup_d3_precision17/17 scoped (100%)docs/EVAL-SET-M5-3.md:88-95 + contracts/eval/docdup-precision-*-v1.json
1.7.0hook_probe485830windows/x86_64/16cpu2026-09-06
1.7.0scan68326225windows/x86_64/16cpu2026-09-06
-

当前发布 v1.7.2 与最新一行是同一份被测代码，故没有自己的行。

+

当前发布 v1.7.2 该有自己的行，而它在打 tag 之后才被测量，尚未落表。

冻结评估点

diff --git a/site/zh/index.html b/site/zh/index.html index c665ca38..64fb5dcf 100644 --- a/site/zh/index.html +++ b/site/zh/index.html @@ -140,7 +140,7 @@

实测 · v1.7.0

守卫误报（人裁 630 事件）每 500 次编辑 0.00 次误报
docdup 判准（冻结黄金集）范围内 17/17（100%）
-

每个数字由回放产生（cli/tests/it/bench.rs 与 bench_backfill.rs），单源 contracts/bench/bench.json——绝不手填。当前发布 v1.7.2 与最新一行是同一份被测代码，故没有自己的行。

+

每个数字由回放产生（cli/tests/it/bench.rs 与 bench_backfill.rs），单源 contracts/bench/bench.json——绝不手填。当前发布 v1.7.2 该有自己的行，而它在打 tag 之后才被测量，尚未落表。

完整评估仪表盘 →

指标值来源
docdup_d3_precision范围内 17/17（100%）docs/EVAL-SET-M5-3.md:88-95 + contracts/eval/docdup-precision-*-v1.json