Repository navigation
Update verified GitHub Action pins and bound release validators - #163
Merged
Merged
Conversation
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars. ⚙️ Run configuration
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
FactoryLine Proof ReviewCommit: Changed-scope walkthrough
Fact-derived next action
Findings
Unproven claims
Authority boundaryAdvisory only. This payload has no execution, approval, publication, deployment, signing, messaging, credential, connector, source write, test execution, repair authority. It does not use CodeRabbit credentials, interpret AI comments as proof, approve, merge, or modify source. Existing Diff-to-Proof mapflowchart LR
REVIEW["Diff-to-Proof Review"]
C1["Changed: .factory/action-dependency-closeout/architecture.json"]
C1 --> REVIEW
C2["Changed: .factory/action-dependency-closeout/compatibility.json"]
C2 --> REVIEW
C3["Changed: .factory/action-dependency-closeout/contract.json"]
C3 --> REVIEW
C4["Changed: .factory/action-dependency-closeout/observations.json"]
C4 --> REVIEW
C5["Changed: .factory/action-dependency-closeout/plan.json"]
C5 --> REVIEW
C6["Changed: .factory/action-dependency-closeout/result.json"]
C6 --> REVIEW
C7["Changed: .factory/action-dependency-closeout/review.md"]
C7 --> REVIEW
C8["Changed: .factory/action-dependency-closeout/ruff.log"]
C8 --> REVIEW
C9["Changed: .factory/action-dependency-closeout/scope.md"]
C9 --> REVIEW
C10["Changed: .factory/action-dependency-closeout/tests-confirmed.log"]
C10 --> REVIEW
C11["Changed: .factory/action-dependency-closeout/upstream.json"]
C11 --> REVIEW
C12["Changed: .github/workflows/audit-benchmark.yml"]
C12 --> REVIEW
C13["Changed: .github/workflows/ci.yml"]
C13 --> REVIEW
C14["Changed: .github/workflows/codeql.yml"]
C14 --> REVIEW
C15["Changed: .github/workflows/factory-pr-proof-review.yml"]
C15 --> REVIEW
C16["Changed: .github/workflows/factory-proof.yml"]
C16 --> REVIEW
C17["Changed: .github/workflows/github-packages.yml"]
C17 --> REVIEW
C18["Changed: .github/workflows/intellij-plugin.yml"]
C18 --> REVIEW
C19["Changed: .github/workflows/jetbrains-marketplace.yml"]
C19 --> REVIEW
C20["Changed: .github/workflows/mutation-audit.yml"]
C20 --> REVIEW
C21["Changed: .github/workflows/opencode-plugin.yml"]
C21 --> REVIEW
C22["Changed: .github/workflows/openvsx.yml"]
C22 --> REVIEW
C23["Changed: .github/workflows/publish.yml"]
C23 --> REVIEW
C24["Changed: .github/workflows/signed-receipts.yml"]
C24 --> REVIEW
C25["Changed: .github/workflows/vscode-extension.yml"]
C25 --> REVIEW
C26["Changed: .github/workflows/vscode-marketplace.yml"]
C26 --> REVIEW
C27["Changed: .github/workflows/worker-verification.yml"]
C27 --> REVIEW
C28["Changed: factoryline/release_integrity.py"]
C28 --> REVIEW
C29["Changed: factoryline/release_route_integrity.py"]
C29 --> REVIEW
C30["Changed: tests/test_publication_metadata.py"]
C30 --> REVIEW
U1["Unmatched: .factory/action-dependency-closeout/architecture.json"]
REVIEW --> U1
U2["Unmatched: .factory/action-dependency-closeout/compatibility.json"]
REVIEW --> U2
U3["Unmatched: .factory/action-dependency-closeout/contract.json"]
REVIEW --> U3
U4["Unmatched: .factory/action-dependency-closeout/observations.json"]
REVIEW --> U4
U5["Unmatched: .factory/action-dependency-closeout/plan.json"]
REVIEW --> U5
U6["Unmatched: .factory/action-dependency-closeout/result.json"]
REVIEW --> U6
U7["Unmatched: .factory/action-dependency-closeout/review.md"]
REVIEW --> U7
U8["Unmatched: .factory/action-dependency-closeout/ruff.log"]
REVIEW --> U8
U9["Unmatched: .factory/action-dependency-closeout/scope.md"]
REVIEW --> U9
U10["Unmatched: .factory/action-dependency-closeout/tests-confirmed.log"]
REVIEW --> U10
U11["Unmatched: .factory/action-dependency-closeout/upstream.json"]
REVIEW --> U11
U12["Unmatched: .github/workflows/audit-benchmark.yml"]
REVIEW --> U12
U13["Unmatched: .github/workflows/ci.yml"]
REVIEW --> U13
U14["Unmatched: .github/workflows/codeql.yml"]
REVIEW --> U14
U15["Unmatched: .github/workflows/factory-pr-proof-review.yml"]
REVIEW --> U15
U16["Unmatched: .github/workflows/factory-proof.yml"]
REVIEW --> U16
U17["Unmatched: .github/workflows/github-packages.yml"]
REVIEW --> U17
U18["Unmatched: .github/workflows/intellij-plugin.yml"]
REVIEW --> U18
U19["Unmatched: .github/workflows/jetbrains-marketplace.yml"]
REVIEW --> U19
U20["Unmatched: .github/workflows/mutation-audit.yml"]
REVIEW --> U20
U21["Unmatched: .github/workflows/opencode-plugin.yml"]
REVIEW --> U21
U22["Unmatched: .github/workflows/openvsx.yml"]
REVIEW --> U22
U23["Unmatched: .github/workflows/publish.yml"]
REVIEW --> U23
U24["Unmatched: .github/workflows/signed-receipts.yml"]
REVIEW --> U24
U25["Unmatched: .github/workflows/vscode-extension.yml"]
REVIEW --> U25
U26["Unmatched: .github/workflows/vscode-marketplace.yml"]
REVIEW --> U26
U27["Unmatched: .github/workflows/worker-verification.yml"]
REVIEW --> U27
U28["Unmatched: factoryline/release_integrity.py"]
REVIEW --> U28
U29["Unmatched: factoryline/release_route_integrity.py"]
REVIEW --> U29
U30["Unmatched: tests/test_publication_metadata.py"]
REVIEW --> U30
F1["unmatched_changed_path"]
REVIEW --> F1
|
zrk222
enabled auto-merge (squash)
October 10, 2026 16:16
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes
Evidence
99 tests passed, 4 platform-specific checks skipped; Ruff clean; architecture HEALTHY with 460 Python files; six hash-bound CF workflow checks PASS. Upstream action metadata/input checks cover 35 usages. Initial local failures are retained outside the commit; the final evidence is committed. Hosted execution requires CI. Delegated review hit usage limits; committed review is explicitly primary-agent review.
Closes #122
Closes #123
Closes #124