157 Commits

• Don't lock PRs that have been closed without merging (#6422)

  The CLA action is designed to automatically lock a PR when it is closed.
  This preserves the CLA agreement statements, preventing the contributor
  from deleting them after the fact. However, this action is currently
  locking PRs that are closed without merging. I'd like to keep such PRs
  open so the contributor can respond with additional comments. I'm
  currently manually unlocking PRs that I close, but I'd like to eliminate
  this manual step.

  Eric Traut · 2025-11-10 08:46:11 -08:00
  5916153157
• chore(deps): bump taiki-e/install-action from 2.60.0 to 2.62.49 (#6438)

  Bumps
  [taiki-e/install-action](https://github.com/taiki-e/install-action) from
  2.60.0 to 2.62.49.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
  releases</a>.</em></p>
  <blockquote>
  <h2>2.62.49</h2>
  <ul>
  <li>
  <p>Update <code>cargo-binstall@latest</code> to 1.15.11.</p>
  </li>
  <li>
  <p>Update <code>cargo-auditable@latest</code> to 0.7.2.</p>
  </li>
  <li>
  <p>Update <code>vacuum@latest</code> to 0.20.2.</p>
  </li>
  </ul>
  <h2>2.62.48</h2>
  <ul>
  <li>
  <p>Update <code>mise@latest</code> to 2025.11.3.</p>
  </li>
  <li>
  <p>Update <code>cargo-audit@latest</code> to 0.22.0.</p>
  </li>
  <li>
  <p>Update <code>vacuum@latest</code> to 0.20.1.</p>
  </li>
  <li>
  <p>Update <code>uv@latest</code> to 0.9.8.</p>
  </li>
  <li>
  <p>Update <code>cargo-udeps@latest</code> to 0.1.60.</p>
  </li>
  <li>
  <p>Update <code>zizmor@latest</code> to 1.16.3.</p>
  </li>
  </ul>
  <h2>2.62.47</h2>
  <ul>
  <li>
  <p>Update <code>vacuum@latest</code> to 0.20.0.</p>
  </li>
  <li>
  <p>Update <code>cargo-nextest@latest</code> to 0.9.111.</p>
  </li>
  <li>
  <p>Update <code>cargo-shear@latest</code> to 1.6.2.</p>
  </li>
  </ul>
  <h2>2.62.46</h2>
  <ul>
  <li>
  <p>Update <code>vacuum@latest</code> to 0.19.5.</p>
  </li>
  <li>
  <p>Update <code>syft@latest</code> to 1.37.0.</p>
  </li>
  <li>
  <p>Update <code>mise@latest</code> to 2025.11.2.</p>
  </li>
  <li>
  <p>Update <code>knope@latest</code> to 0.21.5.</p>
  </li>
  </ul>
  <h2>2.62.45</h2>
  <ul>
  <li>
  <p>Update <code>zizmor@latest</code> to 1.16.2.</p>
  </li>
  <li>
  <p>Update <code>cargo-binstall@latest</code> to 1.15.10.</p>
  </li>
  <li>
  <p>Update <code>ubi@latest</code> to 0.8.4.</p>
  </li>
  <li>
  <p>Update <code>mise@latest</code> to 2025.11.1.</p>
  </li>
  <li>
  <p>Update <code>cargo-semver-checks@latest</code> to 0.45.0.</p>
  </li>
  </ul>
  <h2>2.62.44</h2>
  <ul>
  <li>Update <code>mise@latest</code> to 2025.11.0.</li>
  </ul>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a
  href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
  changelog</a>.</em></p>
  <blockquote>
  <h1>Changelog</h1>
  <p>All notable changes to this project will be documented in this
  file.</p>
  <p>This project adheres to <a href="https://semver.org">Semantic
  Versioning</a>.</p>
  <!-- raw HTML omitted -->
  <h2>[Unreleased]</h2>
  <h2>[2.62.49] - 2025-11-09</h2>
  <ul>
  <li>
  <p>Update <code>cargo-binstall@latest</code> to 1.15.11.</p>
  </li>
  <li>
  <p>Update <code>cargo-auditable@latest</code> to 0.7.2.</p>
  </li>
  <li>
  <p>Update <code>vacuum@latest</code> to 0.20.2.</p>
  </li>
  </ul>
  <h2>[2.62.48] - 2025-11-08</h2>
  <ul>
  <li>
  <p>Update <code>mise@latest</code> to 2025.11.3.</p>
  </li>
  <li>
  <p>Update <code>cargo-audit@latest</code> to 0.22.0.</p>
  </li>
  <li>
  <p>Update <code>vacuum@latest</code> to 0.20.1.</p>
  </li>
  <li>
  <p>Update <code>uv@latest</code> to 0.9.8.</p>
  </li>
  <li>
  <p>Update <code>cargo-udeps@latest</code> to 0.1.60.</p>
  </li>
  <li>
  <p>Update <code>zizmor@latest</code> to 1.16.3.</p>
  </li>
  </ul>
  <h2>[2.62.47] - 2025-11-05</h2>
  <ul>
  <li>
  <p>Update <code>vacuum@latest</code> to 0.20.0.</p>
  </li>
  <li>
  <p>Update <code>cargo-nextest@latest</code> to 0.9.111.</p>
  </li>
  <li>
  <p>Update <code>cargo-shear@latest</code> to 1.6.2.</p>
  </li>
  </ul>
  <h2>[2.62.46] - 2025-11-04</h2>
  <ul>
  <li>
  <p>Update <code>vacuum@latest</code> to 0.19.5.</p>
  </li>
  <li>
  <p>Update <code>syft@latest</code> to 1.37.0.</p>
  </li>
  <li>
  <p>Update <code>mise@latest</code> to 2025.11.2.</p>
  </li>
  </ul>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/44c6d64aa62cd779e873306675c7a58e86d6d532"><code>44c6d64</code></a>
  Release 2.62.49</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/3a701df4c2a3e11596a1c5a65eb0e69c79ee4a82"><code>3a701df</code></a>
  Update <code>cargo-binstall@latest</code> to 1.15.11</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/4242e04eb80c4492261074808c18d638aa247de0"><code>4242e04</code></a>
  Update <code>cargo-auditable@latest</code> to 0.7.2</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/3df5533ef842d100d27dbd43c2fbd8aa0cccddcc"><code>3df5533</code></a>
  Update <code>vacuum@latest</code> to 0.20.2</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/e797ba6a25dbd8669057e123b02812e16138589e"><code>e797ba6</code></a>
  Release 2.62.48</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/bcf91e02acc5cc0ed84eac8d763b7328a3c7cd3f"><code>bcf91e0</code></a>
  Update <code>mise@latest</code> to 2025.11.3</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/e78113b60c103d89241857d78e2610df1305cffd"><code>e78113b</code></a>
  Update <code>cargo-audit@latest</code> to 0.22.0</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/0ef486444ebe65689986d037f4b61d8292b5a4ed"><code>0ef4864</code></a>
  Update <code>vacuum@latest</code> to 0.20.1</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/5eda7b198531ad7024688974dd308f7ea0bd21aa"><code>5eda7b1</code></a>
  Update <code>uv@latest</code> to 0.9.8</li>
  <li><a
  href="https://github.com/taiki-e/install-action/commit/3853a413e6de756806bca9b522388e2d2b5abbd6"><code>3853a41</code></a>
  Update <code>cargo-udeps@latest</code> to 0.1.60</li>
  <li>Additional commits viewable in <a
  href="https://github.com/taiki-e/install-action/compare/0c5db7f7f897c03b771660e91d065338615679f4...44c6d64aa62cd779e873306675c7a58e86d6d532">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=taiki-e/install-action&package-manager=github_actions&previous-version=2.60.0&new-version=2.62.49)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-11-09 22:00:08 -08:00
  082d2fa19a
• chore(deps): bump codespell-project/actions-codespell from 2.1 to 2.2 (#6437)

  Bumps
  [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell)
  from 2.1 to 2.2.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/codespell-project/actions-codespell/releases">codespell-project/actions-codespell's
  releases</a>.</em></p>
  <blockquote>
  <h2>v2.2</h2>
  <!-- raw HTML omitted -->
  <h2>What's Changed</h2>
  <ul>
  <li>Add the config file option and tests by <a
  href="https://github.com/rdimaio"><code>@​rdimaio</code></a> in <a
  href="https://redirect.github.com/codespell-project/actions-codespell/pull/80">codespell-project/actions-codespell#80</a></li>
  <li>Use <code>pip install</code> with <code>--no-cache-dir</code> in the
  Dockerfile by <a
  href="https://github.com/PeterDaveHello"><code>@​PeterDaveHello</code></a>
  in <a
  href="https://redirect.github.com/codespell-project/actions-codespell/pull/89">codespell-project/actions-codespell#89</a></li>
  <li>Upgrade to Python 3.13 by <a
  href="https://github.com/candrews"><code>@​candrews</code></a> in <a
  href="https://redirect.github.com/codespell-project/actions-codespell/pull/82">codespell-project/actions-codespell#82</a></li>
  <li>Add checkout action and problem matcher to README by <a
  href="https://github.com/vadi2"><code>@​vadi2</code></a> in <a
  href="https://redirect.github.com/codespell-project/actions-codespell/pull/32">codespell-project/actions-codespell#32</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/rdimaio"><code>@​rdimaio</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/codespell-project/actions-codespell/pull/80">codespell-project/actions-codespell#80</a></li>
  <li><a
  href="https://github.com/PeterDaveHello"><code>@​PeterDaveHello</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/codespell-project/actions-codespell/pull/89">codespell-project/actions-codespell#89</a></li>
  <li><a href="https://github.com/candrews"><code>@​candrews</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/codespell-project/actions-codespell/pull/82">codespell-project/actions-codespell#82</a></li>
  <li><a href="https://github.com/vadi2"><code>@​vadi2</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/codespell-project/actions-codespell/pull/32">codespell-project/actions-codespell#32</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/codespell-project/actions-codespell/compare/v2...v2.2">https://github.com/codespell-project/actions-codespell/compare/v2...v2.2</a></p>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/8f01853be192eb0f849a5c7d721450e7a467c579"><code>8f01853</code></a>
  MAINT: Release notes</li>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/23a4abea248a30208f0b9d8682ac515b5714cd3e"><code>23a4abe</code></a>
  Add checkout action and problem matcher to README (<a
  href="https://redirect.github.com/codespell-project/actions-codespell/issues/32">#32</a>)</li>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/906f13fba196b1478f876bf3fdc4f9798c77b6f3"><code>906f13f</code></a>
  Upgrade to Python 3.13 (<a
  href="https://redirect.github.com/codespell-project/actions-codespell/issues/82">#82</a>)</li>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/df0bba344d8a1022f611728aa58c5fdfd7c094b1"><code>df0bba3</code></a>
  [pre-commit.ci] pre-commit autoupdate (<a
  href="https://redirect.github.com/codespell-project/actions-codespell/issues/85">#85</a>)</li>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/c460eef33ec1d5171b201b66ffc77bbdbdbb6b2a"><code>c460eef</code></a>
  Use <code>pip install</code> with <code>--no-cache-dir</code> in the
  Dockerfile (<a
  href="https://redirect.github.com/codespell-project/actions-codespell/issues/89">#89</a>)</li>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/037a23a348b32d9060fe3b94ddf99986b779de2c"><code>037a23a</code></a>
  Add the config file option and tests (<a
  href="https://redirect.github.com/codespell-project/actions-codespell/issues/80">#80</a>)</li>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/8d1a4b1bd974b8082be0842c2e7e57c8bf6b9b63"><code>8d1a4b1</code></a>
  Bump actions/setup-python from 5 to 6 (<a
  href="https://redirect.github.com/codespell-project/actions-codespell/issues/92">#92</a>)</li>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/71286cb40fe09b3222aff820311357b4e67cc206"><code>71286cb</code></a>
  Bump actions/checkout from 4 to 5 (<a
  href="https://redirect.github.com/codespell-project/actions-codespell/issues/91">#91</a>)</li>
  <li><a
  href="https://github.com/codespell-project/actions-codespell/commit/fad9339798e1ee3fe979ae0a022c931786a408b8"><code>fad9339</code></a>
  [pre-commit.ci] pre-commit autoupdate (<a
  href="https://redirect.github.com/codespell-project/actions-codespell/issues/84">#84</a>)</li>
  <li>See full diff in <a
  href="https://github.com/codespell-project/actions-codespell/compare/406322ec52dd7b488e48c1c4b82e2a8b3a1bf630...8f01853be192eb0f849a5c7d721450e7a467c579">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codespell-project/actions-codespell&package-manager=github_actions&previous-version=2.1&new-version=2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-11-09 21:58:51 -08:00
  7c7c7567d5
• Updated the AI labeler rules to match the most recent issue tracker labels (#6347)

  This PR updates the AI prompt used for the workflow that adds automated
  labels to incoming issues. I've been updating and refining the list of
  labels as I work through the issue backlog, and the old prompt was
  becoming somewhat outdated.

  Eric Traut · 2025-11-06 16:02:12 -08:00
  039a4b070e
• Updated contributing guidelines and PR template to request link to bug report in PR notes (#6332)

  Some PRs are being submitted without reference to existing bug reports
  or feature requests. This updates the PR template and contributing
  guidelines to request that all PRs from the community contain such a
  link. This provides additional context and helps prioritize, track, and
  assess PRs.

  Eric Traut · 2025-11-06 12:02:39 -08:00
  fe7eb18104
• Revert "fix: pin musl 1.2.5 for DNS fixes" (#6222)

  Reverts openai/codex#6189

  Dylan Hurd · 2025-11-04 11:56:40 -08:00
  3a22018edd
• fix: pin musl 1.2.5 for DNS fixes (#6189)

  ## Summary
  musl 1.2.5 includes [several fixes to DNS over
  TCP](https://www.openwall.com/lists/musl/2024/03/01/2), which appears to
  be the root cause of #6116.
  
  This approach is a bit janky, but according to codex:
  > On the Ubuntu 24.04 runners we use, apt-cache policy musl-tools shows
  only the distro build (1.2.4-2ubuntu2)"
  
  We should build with this version and confirm.
  
  ## Testing
  - [ ] TODO: test and see if this fixes Azure issues

  Dylan Hurd · 2025-11-04 09:17:16 -08:00
  cb6584de46
• chore(deps): bump actions/upload-artifact from 4 to 5 (#6137)

  Bumps
  [actions/upload-artifact](https://github.com/actions/upload-artifact)
  from 4 to 5.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
  releases</a>.</em></p>
  <blockquote>
  <h2>v5.0.0</h2>
  <h2>What's Changed</h2>
  <p><strong>BREAKING CHANGE:</strong> this update supports Node
  <code>v24.x</code>. This is not a breaking change per-se but we're
  treating it as such.</p>
  <ul>
  <li>Update README.md by <a
  href="https://github.com/GhadimiR"><code>@​GhadimiR</code></a> in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li>
  <li>Update README.md by <a
  href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li>
  <li>Readme: spell out the first use of GHES by <a
  href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in
  <a
  href="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li>
  <li>Update GHES guidance to include reference to Node 20 version by <a
  href="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a>
  in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li>
  <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li>
  <li>Prepare <code>v5.0.0</code> by <a
  href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in
  <a
  href="https://redirect.github.com/actions/upload-artifact/pull/734">actions/upload-artifact#734</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/GhadimiR"><code>@​GhadimiR</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li>
  <li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li>
  <li><a
  href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li>
  <li><a
  href="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/upload-artifact/compare/v4...v5.0.0">https://github.com/actions/upload-artifact/compare/v4...v5.0.0</a></p>
  <h2>v4.6.2</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Update to use artifact 2.3.2 package &amp; prepare for new
  upload-artifact release by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/685">actions/upload-artifact#685</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/685">actions/upload-artifact#685</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/upload-artifact/compare/v4...v4.6.2">https://github.com/actions/upload-artifact/compare/v4...v4.6.2</a></p>
  <h2>v4.6.1</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Update to use artifact 2.2.2 package by <a
  href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/673">actions/upload-artifact#673</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/upload-artifact/compare/v4...v4.6.1">https://github.com/actions/upload-artifact/compare/v4...v4.6.1</a></p>
  <h2>v4.6.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Expose env vars to control concurrency and timeout by <a
  href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/662">actions/upload-artifact#662</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/upload-artifact/compare/v4...v4.6.0">https://github.com/actions/upload-artifact/compare/v4...v4.6.0</a></p>
  <h2>v4.5.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>fix: deprecated <code>Node.js</code> version in action by <a
  href="https://github.com/hamirmahal"><code>@​hamirmahal</code></a> in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/578">actions/upload-artifact#578</a></li>
  <li>Add new <code>artifact-digest</code> output by <a
  href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/656">actions/upload-artifact#656</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a
  href="https://github.com/hamirmahal"><code>@​hamirmahal</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/upload-artifact/pull/578">actions/upload-artifact#578</a></li>
  </ul>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/330a01c490aca151604b8cf639adc76d48f6c5d4"><code>330a01c</code></a>
  Merge pull request <a
  href="https://redirect.github.com/actions/upload-artifact/issues/734">#734</a>
  from actions/danwkennedy/prepare-5.0.0</li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/03f282445299bbefc96171af272a984663b63a26"><code>03f2824</code></a>
  Update <code>github.dep.yml</code></li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/905a1ecb5915b264cbc519e4eb415b5d82916018"><code>905a1ec</code></a>
  Prepare <code>v5.0.0</code></li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/2d9f9cdfa99fedaddba68e9b5b5c281eca26cc63"><code>2d9f9cd</code></a>
  Merge pull request <a
  href="https://redirect.github.com/actions/upload-artifact/issues/725">#725</a>
  from patrikpolyak/patch-1</li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/9687587dec67f2a8bc69104e183d311c42af6d6f"><code>9687587</code></a>
  Merge branch 'main' into patch-1</li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/2848b2cda0e5190984587ec6bb1f36730ca78d50"><code>2848b2c</code></a>
  Merge pull request <a
  href="https://redirect.github.com/actions/upload-artifact/issues/727">#727</a>
  from danwkennedy/patch-1</li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/9b511775fd9ce8c5710b38eea671f856de0e70a7"><code>9b51177</code></a>
  Spell out the first use of GHES</li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/cd231ca1eda77976a84805c4194a1954f56b0727"><code>cd231ca</code></a>
  Update GHES guidance to include reference to Node 20 version</li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/de65e23aa2b7e23d713bb51fbfcb6d502f8667d8"><code>de65e23</code></a>
  Merge pull request <a
  href="https://redirect.github.com/actions/upload-artifact/issues/712">#712</a>
  from actions/nebuk89-patch-1</li>
  <li><a
  href="https://github.com/actions/upload-artifact/commit/8747d8cd7632611ad6060b528f3e0f654c98869c"><code>8747d8c</code></a>
  Update README.md</li>
  <li>Additional commits viewable in <a
  href="https://github.com/actions/upload-artifact/compare/v4...v5">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-11-02 20:38:45 -08:00
  f5945d7c03
• chore(deps): bump actions/checkout from 4 to 5 (#4800)

  Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to
  5.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/actions/checkout/releases">actions/checkout's
  releases</a>.</em></p>
  <blockquote>
  <h2>v5.0.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Update actions checkout to use node 24 by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
  <li>Prepare v5.0.0 release by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li>
  </ul>
  <h2>⚠️ Minimum Compatible Runner Version</h2>
  <p><strong>v2.327.1</strong><br />
  <a
  href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
  Notes</a></p>
  <p>Make sure your runner is updated to this version or newer to use this
  release.</p>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/checkout/compare/v4...v5.0.0">https://github.com/actions/checkout/compare/v4...v5.0.0</a></p>
  <h2>v4.3.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>docs: update README.md by <a
  href="https://github.com/motss"><code>@​motss</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
  <li>Add internal repos for checking out multiple repositories by <a
  href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
  <li>Documentation update - add recommended permissions to Readme by <a
  href="https://github.com/benwells"><code>@​benwells</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
  <li>Adjust positioning of user email note and permissions heading by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
  <li>Update README.md by <a
  href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
  <li>Update CODEOWNERS for actions by <a
  href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
  in <a
  href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
  <li>Update package dependencies by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
  <li>Prepare release v4.3.0 by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2237">actions/checkout#2237</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/motss"><code>@​motss</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
  <li><a href="https://github.com/mouismail"><code>@​mouismail</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
  <li><a href="https://github.com/benwells"><code>@​benwells</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
  <li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
  <li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/checkout/compare/v4...v4.3.0">https://github.com/actions/checkout/compare/v4...v4.3.0</a></p>
  <h2>v4.2.2</h2>
  <h2>What's Changed</h2>
  <ul>
  <li><code>url-helper.ts</code> now leverages well-known environment
  variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
  in <a
  href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
  <li>Expand unit test coverage for <code>isGhes</code> by <a
  href="https://github.com/jww3"><code>@​jww3</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p>
  <h2>v4.2.1</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Check out other refs/* by commit if provided, fall back to ref by <a
  href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/checkout/pull/1919">actions/checkout#1919</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/checkout/compare/v4.2.0...v4.2.1">https://github.com/actions/checkout/compare/v4.2.0...v4.2.1</a></p>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a
  href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
  changelog</a>.</em></p>
  <blockquote>
  <h1>Changelog</h1>
  <h2>V5.0.0</h2>
  <ul>
  <li>Update actions checkout to use node 24 by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
  </ul>
  <h2>V4.3.0</h2>
  <ul>
  <li>docs: update README.md by <a
  href="https://github.com/motss"><code>@​motss</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
  <li>Add internal repos for checking out multiple repositories by <a
  href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
  <li>Documentation update - add recommended permissions to Readme by <a
  href="https://github.com/benwells"><code>@​benwells</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
  <li>Adjust positioning of user email note and permissions heading by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
  <li>Update README.md by <a
  href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
  <li>Update CODEOWNERS for actions by <a
  href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
  in <a
  href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
  <li>Update package dependencies by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
  </ul>
  <h2>v4.2.2</h2>
  <ul>
  <li><code>url-helper.ts</code> now leverages well-known environment
  variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
  in <a
  href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
  <li>Expand unit test coverage for <code>isGhes</code> by <a
  href="https://github.com/jww3"><code>@​jww3</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
  </ul>
  <h2>v4.2.1</h2>
  <ul>
  <li>Check out other refs/* by commit if provided, fall back to ref by <a
  href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
  </ul>
  <h2>v4.2.0</h2>
  <ul>
  <li>Add Ref and Commit outputs by <a
  href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
  <li>Dependency updates by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
  href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
  <a
  href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
  </ul>
  <h2>v4.1.7</h2>
  <ul>
  <li>Bump the minor-npm-dependencies group across 1 directory with 4
  updates by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
  <li>Bump actions/checkout from 3 to 4 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
  <li>Check out other refs/* by commit by <a
  href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
  <li>Pin actions/checkout's own workflows to a known, good, stable
  version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
  </ul>
  <h2>v4.1.6</h2>
  <ul>
  <li>Check platform to set archive extension appropriately by <a
  href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
  </ul>
  <h2>v4.1.5</h2>
  <ul>
  <li>Update NPM dependencies by <a
  href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li>
  <li>Bump github/codeql-action from 2 to 3 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li>
  <li>Bump actions/setup-node from 1 to 4 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li>
  <li>Bump actions/upload-artifact from 2 to 4 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li>
  <li>README: Suggest <code>user.email</code> to be
  <code>41898282+github-actions[bot]@users.noreply.github.com</code> by <a
  href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1707">actions/checkout#1707</a></li>
  </ul>
  <h2>v4.1.4</h2>
  <ul>
  <li>Disable <code>extensions.worktreeConfig</code> when disabling
  <code>sparse-checkout</code> by <a
  href="https://github.com/jww3"><code>@​jww3</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1692">actions/checkout#1692</a></li>
  <li>Add dependabot config by <a
  href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
  <a
  href="https://redirect.github.com/actions/checkout/pull/1688">actions/checkout#1688</a></li>
  <li>Bump the minor-actions-dependencies group with 2 updates by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1693">actions/checkout#1693</a></li>
  <li>Bump word-wrap from 1.2.3 to 1.2.5 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
  href="https://redirect.github.com/actions/checkout/pull/1643">actions/checkout#1643</a></li>
  </ul>
  <h2>v4.1.3</h2>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"><code>08c6903</code></a>
  Prepare v5.0.0 release (<a
  href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li>
  <li><a
  href="https://github.com/actions/checkout/commit/9f265659d3bb64ab1440b03b12f4d47a24320917"><code>9f26565</code></a>
  Update actions checkout to use node 24 (<a
  href="https://redirect.github.com/actions/checkout/issues/2226">#2226</a>)</li>
  <li>See full diff in <a
  href="https://github.com/actions/checkout/compare/v4...v5">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-10-31 09:57:07 -07:00
  01ca2b5df6
• chore(deps): bump actions/github-script from 7 to 8 (#4801)

  Bumps [actions/github-script](https://github.com/actions/github-script)
  from 7 to 8.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/actions/github-script/releases">actions/github-script's
  releases</a>.</em></p>
  <blockquote>
  <h2>v8.0.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Update Node.js version support to 24.x by <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/637">actions/github-script#637</a></li>
  <li>README for updating actions/github-script from v7 to v8 by <a
  href="https://github.com/sneha-krip"><code>@​sneha-krip</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/653">actions/github-script#653</a></li>
  </ul>
  <h2>⚠️ Minimum Compatible Runner Version</h2>
  <p><strong>v2.327.1</strong><br />
  <a
  href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
  Notes</a></p>
  <p>Make sure your runner is updated to this version or newer to use this
  release.</p>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/637">actions/github-script#637</a></li>
  <li><a
  href="https://github.com/sneha-krip"><code>@​sneha-krip</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/653">actions/github-script#653</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/github-script/compare/v7.1.0...v8.0.0">https://github.com/actions/github-script/compare/v7.1.0...v8.0.0</a></p>
  <h2>v7.1.0</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Upgrade husky to v9 by <a
  href="https://github.com/benelan"><code>@​benelan</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/482">actions/github-script#482</a></li>
  <li>Add workflow file for publishing releases to immutable action
  package by <a
  href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/485">actions/github-script#485</a></li>
  <li>Upgrade IA Publish by <a
  href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/486">actions/github-script#486</a></li>
  <li>Fix workflow status badges by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/497">actions/github-script#497</a></li>
  <li>Update usage of <code>actions/upload-artifact</code> by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/512">actions/github-script#512</a></li>
  <li>Clear up package name confusion by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/514">actions/github-script#514</a></li>
  <li>Update dependencies with <code>npm audit fix</code> by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/515">actions/github-script#515</a></li>
  <li>Specify that the used script is JavaScript by <a
  href="https://github.com/timotk"><code>@​timotk</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/478">actions/github-script#478</a></li>
  <li>chore: Add Dependabot for NPM and Actions by <a
  href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/472">actions/github-script#472</a></li>
  <li>Define <code>permissions</code> in workflows and update actions by
  <a href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in
  <a
  href="https://redirect.github.com/actions/github-script/pull/531">actions/github-script#531</a></li>
  <li>chore: Add Dependabot for .github/actions/install-dependencies by <a
  href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/532">actions/github-script#532</a></li>
  <li>chore: Remove .vscode settings by <a
  href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/533">actions/github-script#533</a></li>
  <li>ci: Use github/setup-licensed by <a
  href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/473">actions/github-script#473</a></li>
  <li>make octokit instance available as octokit on top of github, to make
  it easier to seamlessly copy examples from GitHub rest api or octokit
  documentations by <a
  href="https://github.com/iamstarkov"><code>@​iamstarkov</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/508">actions/github-script#508</a></li>
  <li>Remove <code>octokit</code> README updates for v7 by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/557">actions/github-script#557</a></li>
  <li>docs: add &quot;exec&quot; usage examples by <a
  href="https://github.com/neilime"><code>@​neilime</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/546">actions/github-script#546</a></li>
  <li>Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
  in <a
  href="https://redirect.github.com/actions/github-script/pull/563">actions/github-script#563</a></li>
  <li>Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by <a
  href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
  in <a
  href="https://redirect.github.com/actions/github-script/pull/575">actions/github-script#575</a></li>
  <li>Clearly document passing inputs to the <code>script</code> by <a
  href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/603">actions/github-script#603</a></li>
  <li>Update README.md by <a
  href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
  href="https://redirect.github.com/actions/github-script/pull/610">actions/github-script#610</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/benelan"><code>@​benelan</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/482">actions/github-script#482</a></li>
  <li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
  made their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/485">actions/github-script#485</a></li>
  <li><a href="https://github.com/timotk"><code>@​timotk</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/478">actions/github-script#478</a></li>
  <li><a
  href="https://github.com/iamstarkov"><code>@​iamstarkov</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/508">actions/github-script#508</a></li>
  <li><a href="https://github.com/neilime"><code>@​neilime</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/546">actions/github-script#546</a></li>
  <li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/actions/github-script/pull/610">actions/github-script#610</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/actions/github-script/compare/v7...v7.1.0">https://github.com/actions/github-script/compare/v7...v7.1.0</a></p>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/actions/github-script/commit/ed597411d8f924073f98dfc5c65a23a2325f34cd"><code>ed59741</code></a>
  Merge pull request <a
  href="https://redirect.github.com/actions/github-script/issues/653">#653</a>
  from actions/sneha-krip/readme-for-v8</li>
  <li><a
  href="https://github.com/actions/github-script/commit/2dc352e4baefd91bec0d06f6ae2f1045d1687ca3"><code>2dc352e</code></a>
  Bold minimum Actions Runner version in README</li>
  <li><a
  href="https://github.com/actions/github-script/commit/01e118c8d0d22115597e46514b5794e7bc3d56f1"><code>01e118c</code></a>
  Update README for Node 24 runtime requirements</li>
  <li><a
  href="https://github.com/actions/github-script/commit/8b222ac82eda86dcad7795c9d49b839f7bf5b18b"><code>8b222ac</code></a>
  Apply suggestion from <a
  href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a></li>
  <li><a
  href="https://github.com/actions/github-script/commit/adc0eeac992408a7b276994ca87edde1c8ce4d25"><code>adc0eea</code></a>
  README for updating actions/github-script from v7 to v8</li>
  <li><a
  href="https://github.com/actions/github-script/commit/20fe497b3fe0c7be8aae5c9df711ac716dc9c425"><code>20fe497</code></a>
  Merge pull request <a
  href="https://redirect.github.com/actions/github-script/issues/637">#637</a>
  from actions/node24</li>
  <li><a
  href="https://github.com/actions/github-script/commit/e7b7f222b11a03e8b695c4c7afba89a02ea20164"><code>e7b7f22</code></a>
  update licenses</li>
  <li><a
  href="https://github.com/actions/github-script/commit/2c81ba05f308415d095291e6eeffe983d822345b"><code>2c81ba0</code></a>
  Update Node.js version support to 24.x</li>
  <li>See full diff in <a
  href="https://github.com/actions/github-script/compare/v7...v8">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=7&new-version=8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-10-31 09:56:33 -07:00
  368f7adfc6
• revert #5812 release file (#5887)

  revert #5812 release file

  Ahmed Ibrahim · 2025-10-28 20:06:16 +00:00
  e3f913f567
• chore: speed-up pipeline (#5812)

  Speed-up pipeline by:
  * Decoupling tests and clippy
  * Use pre-built binary in tests
  * `sccache` for caching of the builds

  jif-oai · 2025-10-28 14:08:52 +00:00
  7ff142d93f
• chore(ci): Speed up macOS builds by using larger runner (#5234)

  Saves about 2min per build
  
  https://github.com/openai/codex/actions/runs/18544852356/job/52860637804
  vs
  https://github.com/openai/codex/actions/runs/18545106208/job/52861427485

  Javi · 2025-10-20 23:47:38 +00:00
  df15a2f6ef
• Reduce symbol size for tests (#5389)

  Test executables were huge because of detailed debugging symbols. Switch
  to less rich debugging symbols.

  pakrym-oai · 2025-10-20 14:52:37 -07:00
  7d6e318f87
• Revert "feat(CI): Allow running rust-release manually and in dry-run mode (#5232)" (#5266)

  This reverts commit 5fa7844ad7.

  Javi · 2025-10-16 21:58:44 +00:00
  fc1723f131
• feat(CI): Allow running rust-release manually and in dry-run mode (#5232)

  Example:
  https://github.com/openai/codex/actions/runs/18544852356/job/52860637804

  Javi · 2025-10-15 23:50:18 +00:00
  5fa7844ad7
• feat(releases): Add macOS notarization step to release workflow (#5233)

  Also: fixed the contents of the `APPLE_CERTIFICATE_P12` and
  `APPLE_CERTIFICATE_PASSWORD` secrets, so the code-signing step will use
  the right certificate now.

  Javi · 2025-10-15 23:31:52 +00:00
  84c9b574f9
• feat: updated github issue template (#5191)

  ### Update github issue template for bug submission. 
  * Add subscription field
  * Require codex cli/extension version
  * Require subscription plan
  * Require error message with added context

  Shijie Rao · 2025-10-15 07:27:24 -07:00
  e8863b233b
• fix: workflow cache (#5050)

  Decouple cache saving to fix the `verify` steps never being run due to a
  cache saving issue

  jif-oai · 2025-10-10 15:57:47 +02:00
  85e7357973
• Shijie/codesign binary (#4899)

  ### Summary
  * Added code signing for MacOS. 
  
  ### Before - UNSIGNED codex-aarch64
  <img width="716" height="334" alt="Screenshot 2025-10-08 at 11 53 28 AM"
  src="https://github.com/user-attachments/assets/276000f1-8be2-4b89-9aff-858fac28b4d4"
  />
  
  ### After - SIGNED codex-aarch64
  <img width="706" height="410" alt="Screenshot 2025-10-08 at 11 52 20 AM"
  src="https://github.com/user-attachments/assets/927528f8-2686-4d15-b3cb-c47a8f11ef29"
  />

  Shijie Rao · 2025-10-09 09:42:24 -07:00
  7b4a4c2219
• Add a longer message to issue deduplicator and some logs (#4836)

  Logs are to diagnose why we're not filtering correctly.

  pakrym-oai · 2025-10-06 10:39:26 -07:00
  7e3a272b29
• Update issue-deduplicator.yml (#4733)

  # External (non-OpenAI) Pull Request Requirements
  
  Before opening this Pull Request, please read the dedicated
  "Contributing" markdown file or your PR may be closed:
  https://github.com/openai/codex/blob/main/docs/contributing.md
  
  If your PR conforms to our contribution guidelines, replace this text
  with a detailed and high quality description of your changes.

  pakrym-oai · 2025-10-04 08:56:42 -07:00
  c5465aed60
• fix: update GH action to use allow-users instead of require-repo-write (#4701)
  Michael Bolin · 2025-10-03 17:37:14 -07:00
  a95605a867
• Remove the feature implementation question (#4698)
  pakrym-oai · 2025-10-03 16:45:25 -07:00
  a4f1c9d67e
• Filter current issue from deduplicator results (#4687)

  ## Summary
  - ensure the issue deduplicator workflow ignores the current issue when
  listing potential duplicates
  
  ## Testing
  - not run (workflow change)
  
  ------
  https://chatgpt.com/codex/tasks/task_i_68e03244836c8320a4aa22bfb98fd291

  pakrym-oai · 2025-10-03 14:22:40 -07:00
  205c36e393
• fix: update actions to reflect https://github.com/openai/codex-action/pull/10 (#4691)
  Michael Bolin · 2025-10-03 14:07:14 -07:00
  e292d1ed21
• fix: run Prettier in CI (#4681)

  This was supposed to be in https://github.com/openai/codex/pull/4645.

  Michael Bolin · 2025-10-03 19:10:27 +00:00
  9823de3cc6
• chore: subject docs/*.md to Prettier checks (#4645)

  Apparently we were not running our `pnpm run prettier` check in CI, so
  many files that were covered by the existing Prettier check were not
  well-formatted.
  
  This updates CI and formats the files.

  Michael Bolin · 2025-10-03 11:35:48 -07:00
  c32e9cfe86
• Modernize workflows (#4668)

  # External (non-OpenAI) Pull Request Requirements
  
  Before opening this Pull Request, please read the dedicated
  "Contributing" markdown file or your PR may be closed:
  https://github.com/openai/codex/blob/main/docs/contributing.md
  
  If your PR conforms to our contribution guidelines, replace this text
  with a detailed and high quality description of your changes.

  pakrym-oai · 2025-10-03 09:25:29 -07:00
  3495a7dc37
• Update issue-deduplicator.yml (#4660)
  pakrym-oai · 2025-10-03 06:41:57 -07:00
  5af08e0719
• Enable codex workflows (#4636)
  pakrym-oai · 2025-10-02 17:37:22 -07:00
  2d6cd6951a
• Update issue-deduplicator.yml (#4638)

  let's test codex_args flag

  pakrym-oai · 2025-10-02 17:19:00 -07:00
  310e3c32e5
• Deduplicator fixes (#4635)
  pakrym-oai · 2025-10-02 16:01:59 -07:00
  819a5782b6
• Bump codex version in actions to latest (#4634)
  pakrym-oai · 2025-10-02 15:14:57 -07:00
  591a8ecc16
• Use GH cli to fetch current issue (#4630)

  Attempting to format the env var caused escaping issues

  pakrym-oai · 2025-10-02 14:43:40 -07:00
  138be0fd73
• Add issue deduplicator workflow (#4628)

  It's a bit hand-holdy in that it pre-downloads issue list but that keeps
  codex running in read-only no-network mode.

  pakrym-oai · 2025-10-02 14:36:33 -07:00
  62cc8a4b8d
• Add issue labeler workflow (#4621)

  Auto label issues using codex cli

  pakrym-oai · 2025-10-02 13:39:45 -07:00
  c43a561916
• fix: pnpm/action-setup@v4 should run before actions/setup-node@v5 (#4555)

  `rust-release.yml` just failed:
  
  https://github.com/openai/codex/actions/runs/18167317356/job/51714366768
  
  The error is:
  
  > Error: Unable to locate executable file: pnpm. Please verify either
  the file path exists or the file can be found within a directory
  specified by the PATH environment variable. Also check the file mode to
  verify the file is executable.
  
  We need to install `pnpm` first like we do in `ci.yml`:
  
  
  https://github.com/openai/codex/blob/f815157dd9d02377f827c0b6cd1cd1d0386461f8/.github/workflows/ci.yml#L17-L25

  Michael Bolin · 2025-10-01 09:04:14 -07:00
  325fad1d92
• chore: introduce publishing logic for @openai/codex-sdk (#4543)

  There was a bit of copypasta I put up with when were publishing two
  packages to npm, but now that it's three, I created some more scripts to
  consolidate things.
  
  With this change, I ran:
  
  ```shell
  ./scripts/stage_npm_packages.py --release-version 0.43.0-alpha.8 --package codex --package codex-responses-api-proxy --package codex-sdk
  ```
  
  Indeed when it finished, I ended up with:
  
  ```shell
  $ tree dist
  dist
  └── npm
      ├── codex-npm-0.43.0-alpha.8.tgz
      ├── codex-responses-api-proxy-npm-0.43.0-alpha.8.tgz
      └── codex-sdk-npm-0.43.0-alpha.8.tgz
  $ tar tzvf dist/npm/codex-sdk-npm-0.43.0-alpha.8.tgz
  -rwxr-xr-x  0 0      0    25476720 Oct 26  1985 package/vendor/aarch64-apple-darwin/codex/codex
  -rwxr-xr-x  0 0      0    29871400 Oct 26  1985 package/vendor/aarch64-unknown-linux-musl/codex/codex
  -rwxr-xr-x  0 0      0    28368096 Oct 26  1985 package/vendor/x86_64-apple-darwin/codex/codex
  -rwxr-xr-x  0 0      0    36029472 Oct 26  1985 package/vendor/x86_64-unknown-linux-musl/codex/codex
  -rw-r--r--  0 0      0       10926 Oct 26  1985 package/LICENSE
  -rw-r--r--  0 0      0    30187520 Oct 26  1985 package/vendor/aarch64-pc-windows-msvc/codex/codex.exe
  -rw-r--r--  0 0      0    35277824 Oct 26  1985 package/vendor/x86_64-pc-windows-msvc/codex/codex.exe
  -rw-r--r--  0 0      0        4842 Oct 26  1985 package/dist/index.js
  -rw-r--r--  0 0      0        1347 Oct 26  1985 package/package.json
  -rw-r--r--  0 0      0        9867 Oct 26  1985 package/dist/index.js.map
  -rw-r--r--  0 0      0          12 Oct 26  1985 package/README.md
  -rw-r--r--  0 0      0        4287 Oct 26  1985 package/dist/index.d.ts
  ```

  Michael Bolin · 2025-10-01 08:29:59 -07:00
  f815157dd9
• SDK CI (#4483)

  Build debug codex in SDK configuration

  pakrym-oai · 2025-09-29 21:15:02 -07:00
  27c6c5d7a7
• TypeScript SDK scaffold (#4455)
  pakrym-oai · 2025-09-29 13:27:13 -07:00
  adbc38a978
• feat: introduce npm module for codex-responses-api-proxy (#4417)

  This PR expands `.github/workflows/rust-release.yml` so that it also
  builds and publishes the `npm` module for
  `@openai/codex-responses-api-proxy` in addition to `@openai/codex`. Note
  both `npm` modules are similar, in that they each contain a single `.js`
  file that is a thin launcher around the appropriate native executable.
  (Since we have a minimal dependency on Node.js, I also lowered the
  minimum version from 20 to 16 and verified that works on my machine.)
  
  As part of this change, we tighten up some of the docs around
  `codex-responses-api-proxy` and ensure the details regarding protecting
  the `OPENAI_API_KEY` in memory match the implementation.
  
  To test the `npm` build process, I ran:
  
  ```
  ./codex-cli/scripts/build_npm_package.py --package codex-responses-api-proxy --version 0.43.0-alpha.3
  ```
  
  which stages the `npm` module for `@openai/codex-responses-api-proxy` in
  a temp directory, using the binary artifacts from
  https://github.com/openai/codex/releases/tag/rust-v0.43.0-alpha.3.

  Michael Bolin · 2025-09-28 19:34:06 -07:00
  618a42adf5
• fix: clean up some minor issues with .github/workflows/ci.yml (#4408)
  Michael Bolin · 2025-09-28 15:31:17 -07:00
  79e51dd607
• feat: build codex-responses-api-proxy for all platforms as part of the GitHub Release (#4406)

  This should make the `codex-responses-api-proxy` binaries available for
  all platforms in a GitHub Release as well as a corresponding DotSlash
  file.
  
  Making `codex-responses-api-proxy` available as an `npm` module will be
  done in a follow-up PR.
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/4404).
  * __->__ #4406
  * #4404
  * #4403

  Michael Bolin · 2025-09-28 15:25:15 -07:00
  ff6dbff0b6
• github: update codespell action to v2.1 in workflow (#4205)

  Old version fails to find python 3.8 docker image

  pakrym-oai · 2025-09-25 04:05:00 +00:00
  d1ed3a4cef
• chore: upgrade to Rust 1.90 (#4124)

  Inspired by Dependabot's attempt to do this:
  https://github.com/openai/codex/pull/4029
  
  The new version of Clippy found some unused structs that are removed in
  this PR.
  
  Though nothing stood out to me in the Release Notes in terms of things
  we should start to take advantage of:
  https://blog.rust-lang.org/2025/09/18/Rust-1.90.0/.

  Michael Bolin · 2025-09-24 08:32:00 -07:00
  639a6fd2f3
• fix: npm publish --tag alpha when building an alpha release (#4112)

  This updates our release process so that when we build an alpha of the
  Codex CLI (as determined by pushing a tag of the format
  `rust-v<cli-version>-alpha.<alpha-version>`), we will now publish the
  corresponding npm module publicly, but under the `alpha` tag. As you can
  see, this PR adds `--tag alpha` to the `npm publish` command, as
  appropriate.

  Michael Bolin · 2025-09-23 23:03:43 -07:00
  9336f2b84b
• fix: vendor ripgrep in the npm module (#3660)

  We try to ensure ripgrep (`rg`) is provided with Codex.
  
  - For `brew`, we declare it as a dependency of our formula:
  
  https://github.com/Homebrew/homebrew-core/blob/08d82d8b006a19efbe234477bc8b18d35b5fef50/Formula/c/codex.rb#L24
  - For `npm`, we declare `@vscode/ripgrep` as a dependency, which
  installs the platform-specific binary as part of a `postinstall` script:
  
  https://github.com/openai/codex/blob/fdb8dadcae9f8eec91bc3eb5a17b3f9b19e28505/codex-cli/package.json#L22
  - Users who download the CLI directly from GitHub Releases are on their
  own.
  
  In practice, I have seen `@vscode/ripgrep` fail on occasion. Here is a
  trace from a GitHub workflow:
  
  ```
  npm error code 1
  npm error path /Users/runner/hostedtoolcache/node/20.19.5/arm64/lib/node_modules/@openai/codex/node_modules/@vscode/ripgrep
  npm error command failed
  npm error command sh -c node ./lib/postinstall.js
  npm error Finding release for v13.0.0-13
  npm error GET https://api.github.com/repos/microsoft/ripgrep-prebuilt/releases/tags/v13.0.0-13
  npm error Deleting invalid download cache
  npm error Download attempt 1 failed, retrying in 2 seconds...
  npm error Finding release for v13.0.0-13
  npm error GET https://api.github.com/repos/microsoft/ripgrep-prebuilt/releases/tags/v13.0.0-13
  npm error Deleting invalid download cache
  npm error Download attempt 2 failed, retrying in 4 seconds...
  npm error Finding release for v13.0.0-13
  npm error GET https://api.github.com/repos/microsoft/ripgrep-prebuilt/releases/tags/v13.0.0-13
  npm error Deleting invalid download cache
  npm error Download attempt 3 failed, retrying in 8 seconds...
  npm error Finding release for v13.0.0-13
  npm error GET https://api.github.com/repos/microsoft/ripgrep-prebuilt/releases/tags/v13.0.0-13
  npm error Deleting invalid download cache
  npm error Download attempt 4 failed, retrying in 16 seconds...
  npm error Finding release for v13.0.0-13
  npm error GET https://api.github.com/repos/microsoft/ripgrep-prebuilt/releases/tags/v13.0.0-13
  npm error Deleting invalid download cache
  npm error Error: Request failed: 403
  ```
  
  To eliminate this error, this PR changes things so that we vendor the
  `rg` binary into https://www.npmjs.com/package/@openai/codex so it is
  guaranteed to be included when a user runs `npm i -g @openai/codex`.
  
  The downside of this approach is the increase in package size: we
  include the `rg` executable for six architectures (in addition to the
  six copies of `codex` we already include). In a follow-up, I plan to add
  support for "slices" of our npm module, so that soon users will be able
  to do:
  
  ```
  npm install -g @openai/codex@aarch64-apple-darwin
  ```
  
  Admittedly, this is a sizable change and I tried to clean some things up
  in the process:
  
  - `install_native_deps.sh` has been replaced by `install_native_deps.py`
  - `stage_release.sh` and `stage_rust_release.py` has been replaced by
  `build_npm_package.py`
  
  We now vendor in a DotSlash file for ripgrep (as a modest attempt to
  facilitate local testing) and then build up the extension by:
  
  - creating a temp directory and copying `package.json` over to it with
  the target value for `"version"`
  - finding the GitHub workflow that corresponds to the
  `--release-version` and copying the various `codex` artifacts to
  respective `vendor/TARGET_TRIPLE/codex` folder
  - downloading the `rg` artifacts specified in the DotSlash file and
  copying them over to the respective `vendor/TARGET_TRIPLE/path` folder
  - if `--pack-output` is specified, runs `npm pack` on the temp directory
  
  To test, I downloaded the artifact produced by this CI job:
  
  
  https://github.com/openai/codex/actions/runs/17961595388/job/51085840022?pr=3660
  
  and verified that `node ./bin/codex.js 'which -a rg'` worked as
  intended.

  Michael Bolin · 2025-09-23 23:00:33 -07:00
  af37785bca
• fix: specify --repo when calling gh (#3806)

  Often, `gh` infers `--repo` when it is run from a Git clone, but our
  `publish-npm` step is designed to avoid the overhead of cloning the
  repo, so add the `--repo` option explicitly to fix things.

  Michael Bolin · 2025-09-17 11:05:22 -07:00
  e5fdb5b0fd
• fix: make publish-npm its own job with specific permissions (#3767)

  The build for `v0.37.0-alpha.3` failed on the `Create GitHub Release`
  step:
  
  https://github.com/openai/codex/actions/runs/17786866086/job/50556513221
  
  with:
  
  ```
  ⚠️ GitHub release failed with status: 403
  {"message":"Resource not accessible by integration","documentation_url":"https://docs.github.com/rest/releases/releases#create-a-release","status":"403"}
  Skip retry — your GitHub token/PAT does not have the required permission to create a release
  ```
  
  I believe I should have not introduced a top-level `permissions` for the
  workflow in https://github.com/openai/codex/pull/3431 because that
  affected the `permissions` for each job in the workflow.
  
  This PR introduces `publish-npm` as its own job, which allows us to:
  
  - consolidate all the Node.js-related steps required for publishing
  - limit the reach of the `id-token: write` permission
  - skip it altogether if is an alpha build
  
  With this PR, each of `release`, `publish-npm`, and `update-branch` has
  an explicit `permissions` block.

  Michael Bolin · 2025-09-16 22:55:53 -07:00
  5332f6e215