Skip to content

deps(actions): bump actions/checkout from 4 to 6#2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6
Open

deps(actions): bump actions/checkout from 4 to 6#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 292f2bd to 6f5dccb Compare May 18, 2026 11:50
physercoe pushed a commit that referenced this pull request May 23, 2026
…alog (v1.0.644-alpha)

ADR-035 W11 fix-up wedge #2: suppress agy's "trust this folder?" arrow-
nav dialog at spawn time so a fresh workdir doesn't sit blocked on a
menu the mobile UI has no way to drive yet (no custom keyboard / action
bar / joystick wired up on the principal side — explicit user concern
from the first on-host smoke).

## Host-verified mechanism

agy persists workspace trust in ~/.gemini/antigravity-cli/settings.json:

  {
    "enableTelemetry": false,
    "statusLine": {...},
    "trustedWorkspaces": ["/abs/path1", "/abs/path2"]
  }

Found ~/hub-work/antigravity was already on the list from the user
clicking through the dialog earlier — that's why subsequent spawns in
that dir didn't re-prompt. The wrong-cwd post-fallback pane that ran in
~/mux-pod/hub got a fresh dialog because that path wasn't on the list.

## Fix

- New preTrustWorkspaceAntigravity(workdir) in launch_m4_antigravity.go.
  Reads the settings file, dedupes against filepath.Clean(workdir),
  appends if missing, writes back. Preserves unrelated keys
  (enableTelemetry, statusLine, future agy additions). Fresh box (no
  file) creates one with just trustedWorkspaces. Best-effort: a
  malformed file logs + continues so a one-time dialog is the worst-
  case degradation, not a blocked spawn.
- Wired into launchM4Antigravity alongside writeMCPConfigAntigravityGlobal
  (same "best-effort, non-fatal" treatment).
- Three locking tests in launch_m4_antigravity_test.go:
  Idempotent (re-spawn doesn't grow the list, other keys preserved),
  FreshBox (creates the file when missing), DedupesClean (trailing
  slash dedupes against the clean form).

## Out of scope (deferred)

Menu-driving UX itself (Q1 from the smoke debrief — Up/Down/Enter on
mobile via either an always-on action keys panel or a CapturePane-based
auto-detector): the user chose "hold — revisit after more smoke testing"
since the trust dialog was the headline blocker and other menus haven't
surfaced yet. ADR-035 §W9 stays deferred; corpus that detector when we
have more menu layouts.

## Verification

- `go build ./...` + `go vet ./...` clean.
- TestPreTrustWorkspaceAntigravity_{Idempotent,FreshBox,DedupesClean}
  all pass.
- lint-docs + lint-templates clean.

Co-Authored-By: Claude Opus 4.7 <[email protected]>
physercoe pushed a commit that referenced this pull request May 27, 2026
…m Tier A

v1.0.723 shipped `blob_get` + lifted the A2A text-only render gate,
closing the half-implemented cross-host file path §5.0 documented.
That work was the urgent motivator for A1 (mailbox three-state
lifecycle); without it, A1 is a defensive durability pattern
without a real stranded-envelope incident to justify the borrow
cost.

Changes:

- TL;DR rewritten — credit v1.0.723, list remaining Tier A picks
  (fallback chains + doctor), explicitly note mailbox lifecycle is
  deferred to Tier C alongside OAuth MCP + auto-compaction.
- §5.0 grounding bullet rewritten to reflect end-to-end
  cross-host file transfer (cite blob_get + renderInboundParts).
  Remove the "A1 more urgent" framing.
- §5.1 Tier A: drop former A1, renumber A2→A1 (fallback chains),
  A3→A2 (doctor). Add a `> Removed` callout explaining the
  demotion so future readers see the trace.
- §5.3 Tier C: mailbox lifecycle added as first item with the
  re-open condition (stranded-envelope incident) named.
- §6 frontier signal #2: soften "our A2A relay should match the
  crash-recovery properties of the filesystem pattern" to point at
  §5.3 — preemptive borrowing without an incident isn't honest.
- §7 open questions: drop the two questions tied to A1 specifics
  (package layout, on-disk shape); keep the quarterly-refresh
  question and re-frame the mailbox + auto-compaction questions as
  conditional on §5.3 reopening.
- §9 related: fix the consumer-side-dispatch-contracts pointer
  (A3→A1 after renumber).
- Last verified vs code: v1.0.722 → v1.0.723.

Doc-only change; no version bump.

Co-Authored-By: Claude Opus 4.7 <[email protected]>
physercoe pushed a commit that referenced this pull request Jun 6, 2026
…rimitive

Director deferred event retention/compaction: it can't reclaim disk while
every entity "delete" is a soft archive (handleArchiveProject /
handleArchiveAgent flip status; no cascade purge across the ~57
project_id-scoped columns). Records the gap as §8-Q7 (a system-wide
soft-vs-hard-delete issue that likely warrants its own ADR) and marks
§6 lever 2 blocked on it.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
physercoe added a commit that referenced this pull request Jun 27, 2026
sessionAgentIDs ran `GROUP BY agent_id ORDER BY MIN(ts)` over a session's
full agent_events span on *every* digest/turns read — even when the digest
was already fresh. For a 10k-event session that is a 10k-row index scan per
Insight open (#118 bottleneck #2).

Denormalize the result onto a new `sessions.agent_ids_json` column,
materialized lazily and ONLY for terminal (archived) sessions whose agent
set can no longer grow. A paused session can resume and bind a new agent, so
non-archived sessions keep scanning authoritatively — behaviour is
byte-identical for live/paused sessions and a malformed/empty blob falls
through to the scan. Read-repair writes the set back on the first archived
read.

- migration 0060: `sessions.agent_ids_json TEXT` (nullable)
- sessionAgentIDs: archived + cached -> O(1) parse; else scan (+ write-back)
- test: scan-not-cached while active; materialize + served-from-cache once
  archived (a later out-of-band event is NOT re-scanned)

Co-authored-by: Ubuntu <[email protected]>
Co-authored-by: Claude Opus 4.8 <[email protected]>
physercoe pushed a commit that referenced this pull request Jul 12, 2026
…one-time download

Diagrams (`diagram` DocKind) via an offline draw.io embed. draw.io is Apache-2.0
+ fully client-side but ~50 MB, so it is NOT bundled — the user downloads it once
and it persists across app updates.

- src-tauri/src/drawio.rs: `drawio_status`/`drawio_download` fetch the official
  `draw.war` (a zip whose root is the static webapp; WEB-INF/META-INF skipped) and
  extract it into a **version-keyed** app-data dir (staging→rename so a partial
  download never reports installed). `serve()` reads a file for the custom
  `drawio://` scheme (path-traversal guarded, mime-typed).
- lib.rs: register the `drawio://` URI scheme (so the webapp's relative asset URLs
  resolve offline — the asset protocol can't) + the two commands. Cargo: `zip`.
- surfaces/DiagramEditor.tsx: gates on install → one-time Download button →
  iframe embed speaking draw.io's JSON protocol (init→load XML, save/autosave→
  persist into the doc body). Platform-correct scheme base (Windows differs).
- AuthorSurface: "◈ Diagram" new-doc button; diagram docs render DiagramEditor
  (shares the AgentCompanion split). i18n en+zh; app.css diagram-frame/install.

Frontend verified: tsc --noEmit + vite build green. Rust compiles in CI only —
download/extract/serve + the embed postMessage flow need on-device verification.
Pinned draw.io v30.3.6.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
physercoe pushed a commit that referenced this pull request Jul 12, 2026
The Author (J2) surface gets a left nav panel with two sections: the
currently open documents (click to focus, kind icon + dirty marker) and an
on-disk workspace folder tree. "Open folder…" picks a directory; clicking a
text file reads it (doc_read) and opens it as a document, or focuses it if
already open. Toggled from the header (☰ Files), width persisted + resizable.

New Rust: workspace.rs (workspace_pick_folder + workspace_list — read-only,
depth/entry-capped, skips build/VCS dirs) and docfile::doc_read (read a file
by known path). New state/workspace.ts persists the folder path;
surfaces/AuthorNav.tsx renders the tree.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
physercoe pushed a commit that referenced this pull request Jul 12, 2026
Release for on-device testing of the five 2026-07-12c fixes/features:
#3 Meta/Enrich blank-app fix + ErrorBoundary, #5 draw.war local-file
install, #1 Read epub/image/video/audio/text viewers, #2 Author file
tree, #4 assistant local-agent path.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
physercoe pushed a commit that referenced this pull request Jul 12, 2026
links, +notes fix, and an assistant tab (#1-#5)

#1 The PDF outline/TOC panel is now resizable (drag handle, width persisted
   to termipod.read.pdfTocW).
#2 Search now highlights the exact matched substrings: each match is wrapped
   in a <mark> inside the transparent text-layer span, so a translucent box
   paints right over the matched word (was a coarse whole-span tint that
   rarely showed).
#3 Internal PDF links (refs, figures, ToC destinations) are now clickable and
   jump within the document — annotations with a `dest` (not just a `url`) are
   captured and routed through goToDest; external links still open the in-app
   browser tab. Internal links get a distinct green hover.
#4 +notes did nothing because clicking the toolbar button collapsed the text
   selection before onClick read it. Fixed: snapshot the selection on the
   button's mousedown (+ preventDefault) and use that snapshot.
#5 The assistant is now a tab alongside Info/Read/Notes/Cite/Meta in the
   reader (embedded Inspector only), so it can be used while reading the PDF;
   its context is the paper + current notes, and Insert appends to notes.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
physercoe pushed a commit that referenced this pull request Jul 13, 2026
…eveal-file button

#1 The PDF outline panel's width was fixed no matter what — the true cause was a
CSS class collision, not the drag logic: the panel carried `pdfjs-toc scroll`, and
the `.scroll` utility (`flex: 1`, defined LATER in the sheet than `.pdfjs-toc`'s
`flex: 0 0 auto`) won on equal specificity, so `flex-basis: 0` + `flex-grow: 1`
overrode the inline `width: tocW` entirely — the panel was sized by flex-grow, and
dragging updated tocW to no effect. Dropped the `scroll` class (the panel already
sets its own `overflow: auto`). This is why prior ResizeHandle fixes didn't help.

#1 ToC/inline-link jumps could land short: pages ABOVE the target may still be
reserving their true height (lazy render, late pageDims), shifting the target after
the scroll starts. scrollToPage now settles — recomputes the absolute target and
re-scrolls whenever it drifts, until the layout above stabilises.

#2 Attachment card gains a "Show in folder" action (+ inline folder icon): a new
`reveal_path` command reveals the file in the OS file manager — `explorer /select`
(Windows), `open -R` (macOS), containing folder via `xdg-open` (Linux). Path is a
single process arg, never a shell string.

Zotero-style left panel (thumbnails/outline tabs) + annotation tools are the next
slice.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
physercoe pushed a commit that referenced this pull request Jul 17, 2026
… nav

#1 Live feed still visibly scrolled into place on open: the tail's cards pin to
the bottom and then reflow (fonts, late layout) over the first frames, and on
WebKit (macOS/Linux webviews) there's no overflow-anchor to hold the bottom, so
the JS re-pin is visible. Hold the feed content invisible (opacity 0) until it
has committed and pinned — reveal after two animation frames — so the settle
happens off-screen and the user sees it already at the latest message. This is
the chat-UI approach: position at the bottom before the first painted frame.

#2 Insight mode's left Turns/Errors nav is now foldable (persisted
termipod.insight.navOpen) via a sidebar toggle, so the transcript can use the
full width.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants