Skip to content

chore: refresh dependencies and maintenance notes - #3564

Merged
steipete merged 2 commits into
mainfrom
oss-triage/20260911-notes-deps
Sep 11, 2026
Merged

chore: refresh dependencies and maintenance notes#3564
steipete merged 2 commits into
mainfrom
oss-triage/20260911-notes-deps

Conversation

@steipete

@steipete steipete commented Sep 11, 2026

Copy link
Copy Markdown
Owner

Refresh SwiftLog to 1.15.1, SwiftLint to 0.65.1, Oxlint to 1.82.0, and Oxfmt to 0.67.0. The manifest, lockfile, release pairing, and pinned macOS/Linux archive digests agree; the new lint tools pass the existing rules without source formatting changes.

Collect the Antigravity fix note with the existing 0.59.1 maintenance notes, ordered by user impact. Merge this after #3532; this PR contains its changelog entry and contributor credit.

SwiftFormat 0.63.0 was evaluated separately and requires changes to 214 files, so its formatting-policy migration is held. The TypeScript and other major-version migrations remain separate maintenance work.

Validation is complete: independent P0–P2 branch review, final make check, real built-CLI config validation, Developer ID–signed native menu smoke, and exact-head CI all pass. Full-suite validation is the hosted macOS/Linux CI run; shared-host local full-suite timeouts from the companion #3532 validation are documented in its proof comment.

@clawsweeper

clawsweeper Bot commented Sep 11, 2026

Copy link
Copy Markdown

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

ClawSweeper review complete

ClawSweeper finished reviewing this revision. The review result is being finalized.

View the workflow run.

@clawsweeper clawsweeper Bot added P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. labels Sep 11, 2026
@clawsweeper

clawsweeper Bot commented Sep 11, 2026

Copy link
Copy Markdown

Codex review: blocked before merge. Reviewed September 11, 2026, 6:43 PM ET / 22:43 UTC (Revision 3).

ClawSweeper review

What this changes

Updates SwiftLog and three lint tools with matching pins and download checksums, and organizes the unreleased maintenance notes.

Merge readiness

Blocked before merge - 2 items remain

The scoped maintenance update remains useful and has no identified blocking code defect. Current main retains the older dependency versions; the owner-authored PR is also protected from cleanup closure.

Priority: P3
Reviewed head: 6fd9231e18a6816f45f5e7dbd65b772fc3f6d7c0

Review scores

Measure Result What it means
Overall readiness 🐚 platinum hermit (4/6) A focused, consistent maintenance patch supported by upstream integrity checks and successful validation.
Proof confidence 🌊 off-meta tidepool Not applicable: The owner-authored PR is exempt from contributor proof requirements; its captured validation additionally reports the updated lint binaries passing existing rules and built CLI/native smoke success on the reviewed head.
Patch quality 🐚 platinum hermit (4/6) No actionable review findings were identified.

Verification

Check Result Evidence
Real behavior Not applicable Not applicable: The owner-authored PR is exempt from contributor proof requirements; its captured validation additionally reports the updated lint binaries passing existing rules and built CLI/native smoke success on the reviewed head.
Evidence reviewed 8 items Complete introduced change: The pinned base-to-head diff contains only four files: the manifest, lockfile, lint installer, and changelog. Download verification and execution logic remain unchanged.
Logging dependency identity and compatibility: GitHub resolves tag 1.15.1 to the exact lockfile revision. The upstream source delta corrects legacy log forwarding and WASI compiler compatibility; CodexBar’s inspected handlers already implement log(event:).
SwiftLint archive verification: All three changed SwiftLint hashes match GitHub’s release-asset SHA256 metadata for macOS, Linux x64, and Linux arm64.
Findings None None.
Security None None.

How this fits together

SwiftLog supports logging in CodexBar’s shared app and CLI code. The lint-tool installer supplies verified binaries used by local checks and CI, while the changelog supplies future release notes.

flowchart TD
  A[Swift package pins] --> B[Shared logging library]
  B --> C[App and CLI logging]
  D[Lint release archives] --> E[Checksum verification]
  E --> F[Local and CI checks]
  G[Maintenance changelog] --> H[Published release notes]
Loading

Before merge

Agent review details

Security

None.

Review metrics

Metric Value Why it matters
Archive integrity 11 changed digests, 11 upstream matches Every updated lint-tool archive retains a matching platform-specific SHA256 pin.

Merge-risk options

Maintainer options:

  1. Decide the mitigation before merge
    Keep the dependency refresh narrow and ensure the centralized maintenance notes describe landed code.
  2. Pause or close
    Do not merge this PR until maintainers decide whether the risk is worth taking.

Technical review

Best possible solution:

Keep the dependency refresh narrow and ensure the centralized maintenance notes describe landed code.

Do we have a high-confidence way to reproduce the issue?

Not applicable: this maintenance PR does not report a new CodexBar failure requiring reproduction.

Is this the best way to solve the issue?

Yes: updating the existing pins and verified archives preserves the established toolchain without adding a parallel implementation or formatting migration.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning medium; reviewed against ad8b1745257e.

Labels

Label justifications:

  • P3: This is a bounded dependency and maintenance-note refresh with no demonstrated urgent user-facing regression.
  • rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🌊 off-meta tidepool and patch quality is 🐚 platinum hermit.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Not applicable: The owner-authored PR is exempt from contributor proof requirements; its captured validation additionally reports the updated lint binaries passing existing rules and built CLI/native smoke success on the reviewed head.

Evidence

What I checked:

  • Complete introduced change: The pinned base-to-head diff contains only four files: the manifest, lockfile, lint installer, and changelog. Download verification and execution logic remain unchanged. (Scripts/install_lint_tools.sh:9, 6fd9231e18a6)
  • Logging dependency identity and compatibility: GitHub resolves tag 1.15.1 to the exact lockfile revision. The upstream source delta corrects legacy log forwarding and WASI compiler compatibility; CodexBar’s inspected handlers already implement log(event:). (Sources/Logging/LogHandler.swift:283, 9c6fb14227f5)
  • SwiftLint archive verification: All three changed SwiftLint hashes match GitHub’s release-asset SHA256 metadata for macOS, Linux x64, and Linux arm64.
  • Oxc release pairing and archive verification: The apps_v1.82.0 release pairs Oxlint 1.82.0 with Oxfmt 0.67.0. All eight selected macOS/Linux archive hashes match GitHub’s release-asset metadata.
  • Current-main and release comparison: Current main pins SwiftLog 1.15.0, and the inspected v0.59.0 installer pins SwiftLint 0.65.0, Oxlint 1.76.0, and Oxfmt 0.61.0. The requested maintenance update is not redundant. (Package.resolved:63, ad8b1745257e)
  • Outstanding landing order: The owner’s body and comment explicitly require landing after fix(antigravity): read sidecar-less WAL conversations with an immutable fallback #3532. A live REST check confirms that companion PR remains open and unmerged; the added Antigravity changelog entry therefore still depends on it. (CHANGELOG.md:10, 6fd9231e18a6)

Likely related people:

  • steipete: Suggested for follow-up; no historical authorship or introduction is verified. (role: unverified routing candidate; confidence: low)

Rating scale

Score Internal tier Crab rank Meaning
6/6 S 🦀 challenger crab Exceptional readiness
5/6 A 🦞 diamond lobster Very strong readiness
4/6 B 🐚 platinum hermit Good normal PR; ordinary maintainer review
3/6 C 🦐 gold shrimp Useful, but confidence is limited
2/6 D 🦪 silver shellfish Proof or implementation needs work
1/6 F 🧂 unranked krab Not merge-ready
N/A NA 🌊 off-meta tidepool Rating does not apply

Overall follows the weaker of proof and patch quality.
Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

Workflow

  • ClawSweeper keeps one durable marker-backed review comment per issue or PR.
  • Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
  • A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
  • PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
  • Maintainers can also comment @clawsweeper review to request a fresh review only.
  • Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
  • Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
  • Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

History

Review history (2 earlier review cycles)
  • reviewed 2026-09-11T21:25:33.376Z sha 0ae260f :: blocked before merge. :: none
  • reviewed 2026-09-11T22:01:04.359Z sha 6fd9231 :: blocked before merge. :: none

@steipete steipete changed the title chore: refresh SwiftLog and maintenance notes chore: refresh dependencies and maintenance notes Sep 11, 2026
@steipete

Copy link
Copy Markdown
Owner Author

Verified final head 6fd9231e18a6816f45f5e7dbd65b772fc3f6d7c0.

SwiftLog 1.15.1 resolves with the matching lockfile. SwiftLint 0.65.1, Oxlint 1.82.0, and Oxfmt 0.67.0 run successfully against the existing rules; the final make check reports zero SwiftLint violations. The Oxc checks pass all 27 selected JavaScript/TypeScript files without formatting changes. The 11 changed macOS/Linux archive digests were verified against the downloaded release assets.

The actual CLI and macOS app build successfully. The built CLI passes isolated config validation. A separate Developer ID–signed debug bundle from this head displays the synthetic status item, opens its menu, and switches to the Cached template-image state through Peekaboo; shutdown was verified. No provider credentials or real account history were used.

Exact-head CI passes, including both macOS test shards and the Linux jobs. Full-suite validation for this dependency change is that CI run; local validation consisted of the build, lint, CLI, and native smoke checks above. The shared-host local full-suite limitations encountered during #3532 are recorded in its proof comment.

Merge after #3532 so its centralized changelog entry describes landed code. This prepares maintenance notes, not a release or tag.

steipete pushed a commit that referenced this pull request Sep 11, 2026
Recover Antigravity local history when Apple's SQLite declines a stable WAL database whose sidecars have been removed after a clean close. Retry only SQLITE_CANTOPEN before reading rows, escape the URI path, and reject the immutable result if file identity or sidecar state changes.

Preserve normal WAL coordination, incomplete-report withholding, scan budgets, and handle cleanup. Add regression coverage for escaped paths, present WALs, concurrent checkpoints, and stable recovery; document the boundary.

Validated with exact-head macOS/Linux CI, a synthetic real-CLI comparison recovering 198 tokens without modifying the database, Developer ID-signed native smoke, lint, and independent review. Changelog entry is centralized in #3564.

Co-authored-by: Peter Urda <peter.urda@gmail.com>
@steipete
steipete merged commit 830cdd8 into main Sep 11, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant