🔧 update: dependencies and improve commit workflow configuration#68
🔧 update: dependencies and improve commit workflow configuration#68warengonzaga wants to merge 54 commits intomainfrom
Conversation
…7.0 (#43) Bumps [wgtechlabs/container-build-flow-action](https://github.com/wgtechlabs/container-build-flow-action) from 1.3.1 to 1.7.0. - [Release notes](https://github.com/wgtechlabs/container-build-flow-action/releases) - [Changelog](https://github.com/wgtechlabs/container-build-flow-action/blob/main/CHANGELOG.md) - [Commits](wgtechlabs/container-build-flow-action@v1.3.1...v1.7.0) --- updated-dependencies: - dependency-name: wgtechlabs/container-build-flow-action dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.4 to 4.32.5. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@89a39a4...c793b71) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps oven/bun from 1.3.9-slim to 1.3.10-slim. --- updated-dependencies: - dependency-name: oven/bun dependency-version: 1.3.10-slim dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- bump @biomejs/biome 2.4.4 -> 2.4.6 - bump @types/node 25.3.0 -> 25.3.3 - bump @types/bun and bun-types 1.3.8 -> 1.3.10 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- update failed task status in DB on queue-level errors - emit intercom task:failed event for nudge system notifications - auto-dismiss sub-agent when no remaining running tasks - extract error message safely from unknown error types Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add .gitattributes to normalize all text files to LF line endings, preventing false positive changes caused by core.autocrlf=true on Windows development environments. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 8.0.0. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.0/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.5 to 4.33.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c793b71...b1bff81) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.33.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@v3...v4) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
#52) Bumps [wgtechlabs/release-build-flow-action](https://github.com/wgtechlabs/release-build-flow-action) from 1.6.0 to 1.7.0. - [Release notes](https://github.com/wgtechlabs/release-build-flow-action/releases) - [Changelog](https://github.com/wgtechlabs/release-build-flow-action/blob/main/CHANGELOG.md) - [Commits](wgtechlabs/release-build-flow-action@v1.6.0...v1.7.0) --- updated-dependencies: - dependency-name: wgtechlabs/release-build-flow-action dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.2.0 to 6.3.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@6044e13...53b8394) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps oven/bun from 1.3.10-slim to 1.3.11-slim. --- updated-dependencies: - dependency-name: oven/bun dependency-version: 1.3.11-slim dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [nick-fields/retry](https://github.com/nick-fields/retry) from 3 to 4. - [Release notes](https://github.com/nick-fields/retry/releases) - [Commits](nick-fields/retry@v3...v4) --- updated-dependencies: - dependency-name: nick-fields/retry dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
#61) Bumps [wgtechlabs/package-build-flow-action](https://github.com/wgtechlabs/package-build-flow-action) from 2.1.0 to 2.1.1. - [Release notes](https://github.com/wgtechlabs/package-build-flow-action/releases) - [Changelog](https://github.com/wgtechlabs/package-build-flow-action/blob/main/CHANGELOG.md) - [Commits](wgtechlabs/package-build-flow-action@v2.1.0...v2.1.1) --- updated-dependencies: - dependency-name: wgtechlabs/package-build-flow-action dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.2. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.2) --- updated-dependencies: - dependency-name: typescript dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.33.0 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b1bff81...c10b806) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0. - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@d6db901...cd2ce8f) --- updated-dependencies: - dependency-name: actions/deploy-pages dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…7.1 (#67) Bumps [wgtechlabs/container-build-flow-action](https://github.com/wgtechlabs/container-build-flow-action) from 1.7.0 to 1.7.1. - [Release notes](https://github.com/wgtechlabs/container-build-flow-action/releases) - [Changelog](https://github.com/wgtechlabs/container-build-flow-action/blob/main/CHANGELOG.md) - [Commits](wgtechlabs/container-build-flow-action@v1.7.0...v1.7.1) --- updated-dependencies: - dependency-name: wgtechlabs/container-build-flow-action dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
📦 Package Build Flow — Monorepo Build🔀 Pull Request Build — Pre-release package for testing PR changes
📥 Quick Install (changed packages)npm i @tinyclaw/types@2.0.0-dev.6c85ab5 @tinyclaw/plugins@2.0.0-dev.6c85ab5 @tinyclaw/plugin-channel-discord@2.0.0-dev.6c85ab5 @tinyclaw/plugin-channel-friends@2.0.0-dev.6c85ab5 tinyclaw@2.0.0-dev.6c85ab5This package was built automatically by the Package Build Flow action. |
🛠️ Container Build Complete - Dev BuildBuild Status: ✅ Success 📦 Pull ImageDocker Hub: docker pull warengonzaga/tinyclaw:dev-6c85ab5GHCR: docker pull ghcr.io/warengonzaga/tinyclaw:dev-6c85ab5📋 Build Details
🏷️ Image Tags• 🔍 Testing Your Changes
🚀 Quick Start# Pull and run the container
Docker Hub: docker pull warengonzaga/tinyclaw:dev-6c85ab5
docker run <your-options> <image>🔒 Security Scan Results📋 Pre-Build Security Checks✅ Source Code Scan: 0 vulnerabilities found 🐳 Container Image Vulnerabilities
📊 Detailed Security ReportsView detailed vulnerability reports in the GitHub Security tab. 🤖 Powered by Container Build Flow Action vv1.7.1 |
📦 Package Build Flow — Monorepo Build🔀 Pull Request Build — Pre-release package for testing PR changes
📥 Quick InstallThis package was built automatically by the Package Build Flow action. |
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 4.0.0 to 5.0.0. - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@7b1f4a7...fc324d3) --- updated-dependencies: - dependency-name: actions/upload-pages-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps oven/bun from 1.3.11-slim to 1.3.12-slim. --- updated-dependencies: - dependency-name: oven/bun dependency-version: 1.3.12-slim dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [marked](https://github.com/markedjs/marked) from 17.0.6 to 18.0.0. - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v17.0.6...v18.0.0) --- updated-dependencies: - dependency-name: marked dependency-version: 18.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
📦 Package Build Flow — Monorepo Build🔀 Pull Request Build — Pre-release package for testing PR changes
📥 Quick InstallThis package was built automatically by the Package Build Flow action. |
📦 Package Build Flow — Monorepo Build🔀 Pull Request Build — Pre-release package for testing PR changes
📥 Quick InstallThis package was built automatically by the Package Build Flow action. |
* 🔒 security (shield): fix false positives in SQL injection arg matching * 🔧 update (cli): register cli channel alias for cli-prefixed owner routing * 🔧 update: hoist CONTENT_FIELDS to module scope and add gateway alias tests Agent-Logs-Url: https://github.com/warengonzaga/tinyclaw/sessions/826a02ef-4bef-4226-84ab-b5891dcc060d Co-authored-by: warengonzaga <15052701+warengonzaga@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: warengonzaga <15052701+warengonzaga@users.noreply.github.com>
Bumps oven/bun from 1.3.12-slim to 1.3.13-slim. --- updated-dependencies: - dependency-name: oven/bun dependency-version: 1.3.13-slim dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@53b8394...48b55a0) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [wgtechlabs/container-build-flow-action](https://github.com/wgtechlabs/container-build-flow-action) from 1.7.1 to 1.8.0. - [Release notes](https://github.com/wgtechlabs/container-build-flow-action/releases) - [Changelog](https://github.com/wgtechlabs/container-build-flow-action/blob/main/CHANGELOG.md) - [Commits](wgtechlabs/container-build-flow-action@v1.7.1...v1.8.0) --- updated-dependencies: - dependency-name: wgtechlabs/container-build-flow-action dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c10b806...e46ed2c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.4.3. - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.4.3) --- updated-dependencies: - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This pull request introduces a range of improvements and maintenance updates across the codebase, focusing on configuration flexibility, CI/CD workflow modernization, dependency upgrades, and documentation enhancements. The most significant changes include expanding provider configuration options, updating and streamlining CI/CD workflows, and improving project documentation for contributors.
Configuration Enhancements
providerIdandmode(with allowed valueslocalorcloud) fields to theProviderEntrySchemainpackages/config/src/types.ts, allowing for more flexible provider definitions. Updated the schema to accept arbitrary provider keys and added corresponding tests for new fields and validation logic. [1] [2] [3] [4] [5]CI/CD Workflow and Tooling Updates
ci.yml,codeql.yml,container.yml,landing.yml,package.yml, andrelease.yml. Also updated Docker base images to newer versions. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10].gitattributesfile to enforce consistent line endings and file type handling..contributerc.jsonto standardize contribution workflow and commit conventions.Dependency and Toolchain Upgrades
package.json,biome.json, andpackages/compactor/package.json. [1] [2] [3]Documentation Improvements
README.mdwith clearer contributing instructions, improved licensing and author attribution, and updated project structure and feature descriptions. [1] [2] [3] [4]Minor Core and Type Additions
StreamEventandToolto imports inpackages/core/src/loop.ts, and introduced a constant for the restart tool name. [1] [2]