github-actions[bot]
6eceebd701
Merge pull request #953 from Anonymity-0/feat/card-send-native-mentions
...
feat(chat): support mentions in native card creation
2026-08-12 02:41:26 +08:00
玉澜
4b898e9011
test(auth): remove PAT polling timing race
2026-08-12 02:41:14 +08:00
玉澜
cb14ae96b3
Merge remote-tracking branch 'upstream/main' into feat/skill-mode-migration
2026-08-12 02:07:42 +08:00
前津
aeb4b2dcaa
fix(chat): reject conflicting card update responses
2026-08-12 02:01:13 +08:00
玉澜
09f9289deb
fix(skill): match managed names literally
2026-08-12 01:56:17 +08:00
前津
bbb14c24dc
Merge remote-tracking branch 'upstream/main' into feat/card-send-native-mentions
2026-08-12 01:28:00 +08:00
github-actions[bot]
79f4be31d5
Merge pull request #956 from DingTalk-Real-AI/codex/fix-text-input-bounds
...
fix(localio): bound all text input paths
2026-08-11 17:16:44 +00:00
玉澜
e2a1be5e93
fix(skill): roll back partial setup transactions
2026-08-12 01:09:19 +08:00
Dennis
69911543c3
Merge remote-tracking branch 'origin/main' into codex/fix-text-input-bounds
2026-08-12 00:58:25 +08:00
john
d4eba7fa96
Merge branch 'main' into feat/skill-mode-migration
2026-08-12 00:54:52 +08:00
前津
bbc2eb111c
Merge remote-tracking branch 'upstream/main' into feat/card-send-native-mentions
2026-08-12 00:54:37 +08:00
github-actions[bot]
b58b8c51bf
Merge pull request #955 from DingTalk-Real-AI/codex/fix-eval-dispatch-403
...
fix(ci): restore eval dispatch PR comments
2026-08-12 00:52:54 +08:00
Dennis
a7678472ab
test(localio): scope path replacement to unix
2026-08-12 00:40:36 +08:00
Dennis
f413db06be
fix(localio): reject special files before open
2026-08-12 00:32:56 +08:00
Dennis
3d67d83110
test(localio): isolate input boundary e2e
2026-08-12 00:28:43 +08:00
玉澜
9de722ab34
fix(skill): roll back failed installer transactions
2026-08-12 00:22:09 +08:00
Dennis
df088573fb
fix(localio): bound all text input paths
2026-08-11 23:58:11 +08:00
chichuan
a0c64e5ef4
fix(ci): restore eval dispatch PR comments
2026-08-11 23:57:12 +08:00
前津
eebd6b2a1c
fix(chat): accept card update acknowledgement
2026-08-11 23:44:53 +08:00
玉澜
181f030350
test(skill): normalize backup paths on Windows
2026-08-11 23:40:28 +08:00
john
6140e503ec
Merge branch 'main' into feat/skill-mode-migration
2026-08-11 23:31:08 +08:00
玉澜
9539ae8e40
fix(skill): centralize managed skill metadata
2026-08-11 23:26:49 +08:00
github-actions[bot]
7a140e59c3
Merge pull request #946 from DingTalk-Real-AI/codex/minutes-shortcuts
...
feat(minutes): align and expand shortcut workflows
2026-08-11 23:20:21 +08:00
前津
b1bfe6002d
Revert "docs(skill): route create-only cards to native command"
...
This reverts commit 8e8e3a3ce8
2026-08-11 22:54:02 +08:00
Dennis
38832448d2
Merge remote-tracking branch 'origin/main' into codex/minutes-shortcuts
2026-08-11 22:53:51 +08:00
前津
8e8e3a3ce8
docs(skill): route create-only cards to native command
2026-08-11 22:52:24 +08:00
长真
132dea9aaa
fix(chat): hide remaining im id aliases
2026-08-11 22:51:16 +08:00
Dennis
3d4e43f4fc
fix(minutes): align search scope enums
2026-08-11 22:49:27 +08:00
长真
5034c332fe
fix(chat): converge im id flags
2026-08-11 22:38:37 +08:00
github-actions[bot]
155ce984c9
Merge pull request #916 from gtezg30062/feat/pull_knowledge_base_dynamic_1
...
Feat/pull knowledge base dynamic 1
2026-08-11 14:21:30 +00:00
john
4b93a1cb28
Merge branch 'main' into feat/pull_knowledge_base_dynamic_1
2026-08-11 22:05:50 +08:00
github-actions[bot]
1d384b9189
Merge pull request #952 from DingTalk-Real-AI/feat/eval-devix-poll
...
feat(eval): 用可验证轮询中继替代受限网络直连
2026-08-11 21:51:30 +08:00
玉澜
9f4e748404
fix(skill): preserve installs during layout migration
2026-08-11 21:37:55 +08:00
chichuan
025287873d
Merge remote-tracking branch 'origin/main' into feat/eval-devix-poll
2026-08-11 21:33:26 +08:00
chichuan
6ddda6f1bf
fix(eval): bind dispatch markers to workflow artifacts
...
Bind each accepted marker to the exact workflow run attempt, immutable artifact, source comment, and current PR head so a historical successful run cannot authorize a different payload.
2026-08-11 21:33:10 +08:00
chichuan
e0dd800378
docs: state the release fragment filename and file-kind contract
2026-08-11 21:24:43 +08:00
chichuan
309c39a8e0
Merge remote-tracking branch 'origin/main' into codex/release-fragments
2026-08-11 21:24:25 +08:00
chichuan
39d6caa24d
fix: validate every top-level .changes entry in the fragment gate
...
The fragment gate only ran validation when the changed path matched the
legal fragment name pattern, so `.changes/Foo.md`, `.changes/notes.txt`
and a symlinked fragment slipped through untouched and then broke the
next PR that added a legal fragment. The trigger now fires on any
top-level `.changes/` change other than README.md and rejects every
entry that is not README.md, released/, or a 100644 blob named
^[a-z0-9][a-z0-9._-]*\.md$.
The renderer had the same hole from the other side: `find -type f`
is false for symlinks, so a symlinked fragment was silently dropped
from the rendered notes, and the `[a-z0-9]*.md` glob only constrained
the first character so `chat reply.md` passed. It now walks every
top-level entry and fails on symlinks, unexpected directories,
non-regular files and illegal names. Both scripts pin LC_ALL=C so the
ASCII ranges cannot match uppercase under a different collation.
Adds regression coverage for illegal names, non-markdown entries,
symlinks and executable modes on both the gate and the renderer.
2026-08-11 21:07:12 +08:00
玉澜
0d4bd28a08
Merge remote-tracking branch 'origin/main' into feat/skill-mode-migration
2026-08-11 20:46:15 +08:00
玉澜
9264323b29
revert(ci): keep existing pull request checkout policy
2026-08-11 20:45:32 +08:00
github-actions[bot]
dde5049454
Merge pull request #911 from Anonymity-0/feat/t07-chat-response-envelope
...
feat(chat): 统一 typed 与 shortcut 消息响应契约
2026-08-11 12:42:30 +00:00
玉澜
1744880648
test(skill): cover managed marker failure
2026-08-11 20:34:00 +08:00
玉澜
246f4ebaf5
docs(skill): consolidate migration design into RFC
2026-08-11 20:24:07 +08:00
Dennis
a3f5a83527
Merge remote-tracking branch 'origin/main' into codex/minutes-shortcuts
2026-08-11 20:22:35 +08:00
Anonymity-0
5d7a66d4a3
Merge branch 'main' into feat/t07-chat-response-envelope
2026-08-11 20:22:20 +08:00
玉澜
ec5f312fd6
Merge remote-tracking branch 'origin/main' into feat/skill-mode-migration
2026-08-11 20:19:30 +08:00
玉澜
3c81741e2e
fix(skill): fail partial setup installs
2026-08-11 20:19:00 +08:00
chichuan
aebb75371b
Merge branch 'main' into feat/eval-devix-poll
2026-08-11 20:17:55 +08:00
chichuan and Claude Opus 4.6
0a0634cfc2
fix(eval): harden extract_payload against non-dict JSON and invalid field types
...
Address P1 finding: extract_payload now strictly requires the parsed JSON
to be a dict, and validates each field's type and format:
- pr_number: string of digits
- pr_head_sha: 40-char lowercase hex string
- products: alphanumeric with commas/dots/hyphens/underscores only
- run_id: string of digits
- cases_ref: string (may be empty)
validate_run_id also guards against non-string input.
Added tests for: integer/array/string/null JSON, numeric field types,
invalid SHA format, injection in products, missing required fields.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-08-11 20:17:27 +08:00
github-actions[bot]
46aa0fe16d
Merge pull request #944 from xlb1130/fix/85313115-chat-catalog-tools
...
fix(chat): register missing typed catalog tools
2026-08-11 20:11:26 +08:00
github-actions[bot]