[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

gcb-client@0.11.4

Patch Changes

• Updated dependencies []:
  • gcb-core@0.11.4

gcb-host@0.11.4

Patch Changes

• #166 49e733d Thanks @JounQin! - Check allowFork through authenticated credentials instead of the unauthenticated public API: the
  host uses its gh account, and the app provider uses the installation on the fork (rejecting a fork
  without one). Both require a public fork and a public matched parent/source.
• Updated dependencies []:
  • gcb-core@0.11.4

gcb-core@0.11.4

No changes in this release.

Summary by CodeRabbit

• Bug Fixes
  • Fork eligibility checks now use authenticated access rather than the unauthenticated public API. The host checks its authenticated account, while the app provider checks for an installation on the fork and rejects forks without one.
  • Forks and their matched parent or source repositories must be public.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The pull request updates the client, core, and host packages to version 0.11.4. It adds release changelog entries, updates client and host dependencies on gcb-core, and removes a host changeset.

Changes: 0.11.4 package release

Layer / File(s)	Summary
Release notes and package versions .changeset/allowfork-auth.md, packages/{client,core,host}/CHANGELOG.md, packages/{client,core,host}/package.json	The three packages are updated to version 0.11.4. The client and host dependencies on gcb-core are updated to 0.11.4. The changelogs add 0.11.4 entries; the host entry describes authenticated allowFork checks and public fork and parent/source requirements. The host changeset is removed.

Estimated code review effort: 1 (Trivial) | ~4 minutes

Change: Other

Suggested reviewers: jounqin

Merge Risk: Minimal · up to 87154

This is a routine release metadata update that bumps three packages to 0.11.4 and records the host allowFork change in the changelog. No code behavior changes in this PR, and the merge risk is minimal.

Architecture risk: Low · up to 87154

The change affects 3 systems.

Changed systems: packages/client, packages/core, packages/host

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — packages/client (library) was modified; 2 changed files map to changed impact.
• observed — packages/core (library) was modified; 2 changed files map to changed impact.
• observed — packages/host (library) was modified; 2 changed files map to changed impact.

Before / after behavior

• observed — Modified behavior in packages/client/CHANGELOG.md: The changelog adds the 0.11.4 release heading and a patch entry documenting the gcb-core@0.11.4 dependency update.
• observed — Modified behavior in packages/client/package.json: The package version changes from 0.11.3 to 0.11.4.
• observed — Modified behavior in packages/client/package.json: The gcb-core dependency changes from 0.11.3 to 0.11.4.
• observed — Modified behavior in packages/core/CHANGELOG.md: The changelog adds the 0.11.4 heading and records that the release has no changes.

Pre-merge checks: 3 · 1

Failed checks: 1 inconclusive

Check name	Status	Explanation	Resolution
Title check		The title "chore: release packages" does not describe the substance of the change. The PR is a Changesets release PR that bumps gcb-client, gcb-core, and gcb-host to 0.11.4 and records a patch fix to …	Retitle the PR to name the primary change, for example "chore: release gcb-host 0.11.4 with authenticated allowFork check". If the team keeps the Changesets default title, no action is required, but the title does not identify the allowFork…

Passed checks: 3 passed

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title "chore: release packages" does not describe the substance of the change. The PR is a Changesets release PR that bumps gcb-client, gcb-core, and gcb-host to 0.11.4 and records a patch fix to the allowFork check in gcb-host. The title identifies the PR as a release, which is accurate, but it does not name the main change. The title is generic and does not convey the allowFork behavior change.

Resolution

Retitle the PR to name the primary change, for example "chore: release gcb-host 0.11.4 with authenticated allowFork check". If the team keeps the Changesets default title, no action is required, but the title does not identify the allowFork fix for teammates scanning history.

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: d7245589-1771-4ddd-b206-317ee140b164

Commits

Reviewing files that changed from the base of the PR and between 49e733d and 871546d.

Files ignored due to path filters: 1

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

Files selected for processing: 7

• .changeset/allowfork-auth.md
• packages/client/CHANGELOG.md
• packages/client/package.json
• packages/core/CHANGELOG.md
• packages/core/package.json
• packages/host/CHANGELOG.md
• packages/host/package.json

Files with no reviewable changes: 1

• .changeset/allowfork-auth.md

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.