Commit history

1. Commits on Jul 31, 2026

   • chore(ci): bump docker/login-action from 4.5.1 to 4.5.2 (#943)

     Show description for ba2bd7c
     dependabot[bot]

     authored
     ba2bd7cView commit details

     Copy full SHA for ba2bd7c

     View code at this pointBrowse repository at this point
2. Commits on Jul 30, 2026

   • fix(sandbox): pin the Landlock thread so a sandboxed MCP server cannot exec unconfined (#932)

     Show description for 5b31672
     Dumbris

     authored
     5b31672View commit details

     Copy full SHA for 5b31672

     View code at this pointBrowse repository at this point

   • fix(eval): pin the D1 dataset's upstream servers, all seven (#931)

     Show description for b17a3b7
     Dumbris

     authored
     b17a3b7View commit details

     Copy full SHA for b17a3b7

     View code at this pointBrowse repository at this point
3. Commits on Jul 24, 2026

   • chore(ci): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#916)

     Show description for 034086d
     dependabot[bot]

     authored
     034086dView commit details

     Copy full SHA for 034086d

     View code at this pointBrowse repository at this point

   • chore(ci): bump docker/login-action from 4.5.0 to 4.5.1 (#914)

     Show description for 56fb8e0
     dependabot[bot]

     authored
     56fb8e0View commit details

     Copy full SHA for 56fb8e0

     View code at this pointBrowse repository at this point

   • chore(ci): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (#892)

     Show description for 7cc904d
     

     dependabot[bot]

     and

     Dumbris

     authored
     7cc904dView commit details

     Copy full SHA for 7cc904d

     View code at this pointBrowse repository at this point

   • chore(ci): bump actions/setup-go from 5.6.0 to 7.0.0 (#894)

     Show description for 8c886f0
     

     dependabot[bot]

     and

     Dumbris

     authored
     8c886f0View commit details

     Copy full SHA for 8c886f0

     View code at this pointBrowse repository at this point

   • chore(ci): bump docker/login-action from 4.4.0 to 4.5.0 (#905)

     Show description for a893d54
     dependabot[bot]

     authored
     a893d54View commit details

     Copy full SHA for a893d54

     View code at this pointBrowse repository at this point

   • chore(ci): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#906)

     Show description for d620b5f
     dependabot[bot]

     authored
     d620b5fView commit details

     Copy full SHA for d620b5f

     View code at this pointBrowse repository at this point
4. Commits on Jul 23, 2026

   • chore(ci): bump github/codeql-action/upload-sarif (#904)

     Show description for 6aa12d0
     dependabot[bot]

     authored
     6aa12d0View commit details

     Copy full SHA for 6aa12d0

     View code at this pointBrowse repository at this point

   • ci: align codeql-action steps on one SHA + dependabot group (#900)

     Show description for b41a738
     

     Dumbris

     and

     claude

     authored
     b41a738View commit details

     Copy full SHA for b41a738

     View code at this pointBrowse repository at this point
5. Commits on Jul 22, 2026

   • chore(ci): bump actions/checkout from 7.0.0 to 7.0.1 (#891)

     Show description for 5a1dd29
     dependabot[bot]

     authored
     5a1dd29View commit details

     Copy full SHA for 5a1dd29

     View code at this pointBrowse repository at this point

   • chore(ci): bump github/codeql-action/init from 4.37.0 to 4.37.3 (#895)

     Show description for 4189e5a
     dependabot[bot]

     authored
     4189e5aView commit details

     Copy full SHA for 4189e5a

     View code at this pointBrowse repository at this point

   • chore(ci): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#889)

     Show description for 178d62f
     dependabot[bot]

     authored
     178d62fView commit details

     Copy full SHA for 178d62f

     View code at this pointBrowse repository at this point

   • chore(deps): ignore TypeScript 7.x for frontend until vue-tsc/typescript-eslint support it (#886)

     Dumbris

     authored
     b39a479View commit details

     Copy full SHA for b39a479

     View code at this pointBrowse repository at this point

   • chore(ci): bump actions/setup-node from 6.4.0 to 7.0.0 (#864)

     Show description for eb4726a
     dependabot[bot]

     authored
     eb4726aView commit details

     Copy full SHA for eb4726a

     View code at this pointBrowse repository at this point

   • chore(ci): bump softprops/action-gh-release from 3.0.1 to 3.0.2 (#866)

     Show description for 4fd1cd0
     dependabot[bot]

     authored
     4fd1cd0View commit details

     Copy full SHA for 4fd1cd0

     View code at this pointBrowse repository at this point

   • chore(ci): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#868)

     Show description for 307ab99
     dependabot[bot]

     authored
     307ab99View commit details

     Copy full SHA for 307ab99

     View code at this pointBrowse repository at this point
6. Commits on Jul 17, 2026

   • chore(ci): bump docker/login-action from 4.2.0 to 4.4.0 (#863)

     Show description for 0aa3de4
     dependabot[bot]

     authored
     0aa3de4View commit details

     Copy full SHA for 0aa3de4

     View code at this pointBrowse repository at this point

   • chore(ci): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#867)

     Show description for 499d4a2
     dependabot[bot]

     authored
     499d4a2View commit details

     Copy full SHA for 499d4a2

     View code at this pointBrowse repository at this point
7. Commits on Jul 15, 2026

   • feat(server): adaptive TOON output for tool results (spec 084) (#852)

     Show description for bf3f736
     Dumbris

     authored
     bf3f736View commit details

     Copy full SHA for bf3f736

     View code at this pointBrowse repository at this point

   • feat(bench): discovery-effectiveness profiler (spec 083) (#851)

     Show description for 1500a47
     Dumbris

     authored
     1500a47View commit details

     Copy full SHA for 1500a47

     View code at this pointBrowse repository at this point
8. Commits on Jul 14, 2026

   • chore(ci): bump actions/checkout from 6 to 7 (#832)

     Show description for d9aff9b
     

     dependabot[bot]

     and

     Dumbris

     authored
     d9aff9bView commit details

     Copy full SHA for d9aff9b

     View code at this pointBrowse repository at this point

   • chore(ci): bump docker/build-push-action from 5.4.0 to 7.3.0 (#830)

     Show description for 98692af
     dependabot[bot]

     authored
     98692afView commit details

     Copy full SHA for 98692af

     View code at this pointBrowse repository at this point

   • fix(tray): green the native test suite — two of the skipped tests were real bugs (#848)

     Show description for 987f9a6
     Dumbris

     authored
     987f9a6View commit details

     Copy full SHA for 987f9a6

     View code at this pointBrowse repository at this point
9. Commits on Jul 13, 2026

   • ci: auto-approve spec-gardener PRs so they merge without --admin (#842)

     Show description for c603654
     Dumbris

     authored
     c603654View commit details

     Copy full SHA for c603654

     View code at this pointBrowse repository at this point
10. Commits on Jul 11, 2026

    • ci(codeql): finish the v4.37.0 bump — autobuild and analyze were left on v4.36.3 (#838)

      Show description for fa7deba
      Dumbris

      authored
      fa7debaView commit details

      Copy full SHA for fa7deba

      View code at this pointBrowse repository at this point
11. Commits on Jul 10, 2026

    • chore(ci): bump github/codeql-action/init from 4.36.3 to 4.37.0 (#827)

      Show description for a325f32
      dependabot[bot]

      authored
      a325f32View commit details

      Copy full SHA for a325f32

      View code at this pointBrowse repository at this point

    • chore(ci): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 (#829)

      Show description for e1be854
      dependabot[bot]

      authored
      e1be854View commit details

      Copy full SHA for e1be854

      View code at this pointBrowse repository at this point

    • chore(ci): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 (#826)

      Show description for 17f5d94
      dependabot[bot]

      authored
      17f5d94View commit details

      Copy full SHA for 17f5d94

      View code at this pointBrowse repository at this point
12. Commits on Jul 7, 2026

    • feat(ci): tag-blocking release QA gate — server-type matrix + invariants (Spec 081 T1) (#819)

      Show description for b5a24c9
      Dumbris

      authored
      b5a24c9View commit details

      Copy full SHA for b5a24c9

      View code at this pointBrowse repository at this point

    • feat(update): channel-aware guided update command (Spec 079 US2) (#818)

      Show description for 6c14e74
      Dumbris

      authored
      6c14e74View commit details

      Copy full SHA for 6c14e74

      View code at this pointBrowse repository at this point

    • fix(release): inject httpapi.buildVersion everywhere + guard update check against non-semver versions (#814)

      Show description for e6190f6
      

      Dumbris

      and

      claude

      authored
      e6190f6View commit details

      Copy full SHA for e6190f6

      View code at this pointBrowse repository at this point

    • chore(ci): align codeql-action init/analyze with autobuild at v4.36.3

      Show description for e5aa21b
      Dumbris

      committed
      e5aa21bView commit details

      Copy full SHA for e5aa21b

      View code at this pointBrowse repository at this point

    • chore(ci): bump sigstore/cosign-installer from 3.10.1 to 4.1.2 (#648)

      Show description for e29f099
      dependabot[bot]

      authored
      e29f099View commit details

      Copy full SHA for e29f099

      View code at this pointBrowse repository at this point