Repository navigation
Bump the github-actions group with 2 updates - #10
Closed
dependabot[bot] wants to merge 27 commits into
Closed
dependabot[bot] wants to merge 27 commits into
dependabot[bot] wants to merge 27 commits into
Conversation
Use the Photos JSON record schema for CSV exports and refresh eligibility from the daemon's current inputs. Keep native subprocess input and output within one bounded lifetime, avoid duplicating private request or error payloads, and validate HTTP hosts before startup. Validate with 901 package-local tests, public-content checks, and a bounded comparison against 29 Apple and Photos reference projects.
Preserve Notes and Reminders content and lifecycle data, improve native Maps collections and modern Calendar/Notifications contracts, and correct result fidelity in file, document, mail and system targets. Add multi-input framework normalization and scoped native fixture validation with matching architecture, user guidance and skill updates. Keep Maps new-place saving explicitly awaiting native command validation. This checkpoint preserves remaining app alignment work for refactoring. Validation: 1111 default Swift Testing tests in 74 suites; 30 release-tool tests; public content/link checks and diff whitespace checks passed. Native opt-in tests were not enabled for this checkpoint. Use the io.github.computer-mcp application identity.
Updates swift-argument-parser from 1.7.1 to 1.8.2 and swift-http-types from 1.5.1 to 1.8.0.
The README header is now the family header in light and dark, delivered by the organization design system through .github/brand/brand.lock.json and verified by the shared brand-check workflow. It replaces the standalone banner.
swift-subprocess 1.0 made executable resolution asynchronous, requires an explicit input for closure-based runs and renames the closure result. Synchronous runs now resolve executable names against PATH themselves, following the same rules as the package: names are looked up only in PATH directories and paths are used unchanged.
Fifteen targets carried verbatim copies of the read-only dry-run check while CLISafety.rejectDryRunForReadOnly in Utility had no callers; those targets now call it, and Clipboard reports the same message as the rest. Intelligence keeps its own check because it also rejects risk flags with its own failure codes. The SHA-256 hex helper, copied into seventeen targets, now lives once in Utility. publish-release moves from .github/scripts to Scripts with the other release tools. Scripts/validate-public-content gains fixture tests that cover every finding it reports. The changelog gains the 0.1.0-alpha.4 entry for the merged changes, and the alpha.1 and alpha.2 entries state that those tags were never published as releases. Install and packaging commands use a VERSION placeholder instead of a fixed release. AGENTS.md follows the canonical agent guide. The retired TCC proposal stub, the .github navigation page and the references to local agent directories are removed, and CODEOWNERS is added.
The version declaration and Changelog entry now name 0.1.0-alpha.4. The bundled reminder-creator skill quoted no part of its description, which contains a colon, so strict YAML skill loaders rejected it. The description is now quoted, and a release-tools test keeps source skill metadata loadable.
Run the real MCP executable tests as a serialized suite in a separate required validation phase, keeping concurrent session admission inside its test. The default concurrent suite includes synchronous executor saturation and compiler fixtures, which can starve HTTP callbacks past their existing deadlines. Include the executable suite in staged and unpacked release acceptance. Capture HTTP server output in files, require the configured server to answer before connecting, and read buffered socket headers before checking a pending receive deadline.
Brand artwork now renders in Inter, Noto Sans SC and JetBrains Mono, matching the organization's system typography. Delivered with `Brand/brand.py sync` from computer-mcp/.github; the brand lock is updated.
Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-b2576794da
branch
October 18, 2026 14:49
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 2 updates: actions/upload-artifact and actions/download-artifact.
Updates
actions/upload-artifactfrom 7.0.1 to 7.0.2Release notes
Sourced from actions/upload-artifact's releases.
Commits
cf430e0Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2c2acdedchore: prepare v7.0.2 release4687c1bMerge pull request #821 from actions/tunc-d-upload-artifact-package-bump8cbe1beBump@actions/artifactto 6.3.1Updates
actions/download-artifactfrom 8.0.1 to 8.0.2Release notes
Sourced from actions/download-artifact's releases.
Commits
9000827Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2e455989Prepare download-artifact v8.0.2a00b90cMerge pull request #492 from actions/tunc-d-download-artifact-package-bump29bb7ceUpdate@actions/artifactto 6.3.1484a0b5Update the readme (#473)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions