From bffd44a6470f287307b185c743c2608611dcc218 Mon Sep 17 00:00:00 2001 From: Copilot <223556219+Copilot@users.noreply.github.com> Date: Thu, 12 Nov 2026 07:17:57 +0000 Subject: [PATCH 1/2] [Copilot Dreaming] Remove an overbroad README license-capture guarantee Maintainers could assume a package's complete README license section was captured even when the extractor only accepts a license heading and two specific MIT text markers. Removing that broad assurance avoids treating the guide as evidence for unsupported extraction. https://github.com/github/evals-action/blob/6e4c077e92194c7e75663d8d782426841047e887/tooling/license-notices.mjs#L48-L59 Unresolved entries still block public release and require authoritative terms and release-owner disposition. https://github.com/github/evals-action/blob/6e4c077e92194c7e75663d8d782426841047e887/CONTRIBUTING.md#L80-L85 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- CONTRIBUTING.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 576c12a..ccaae2c 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -67,8 +67,7 @@ The build also generates `dist/THIRD-PARTY-NOTICES.txt` and `dist/bundled-dependencies.json` from inputs with positive byte contributions to esbuild's executable output, excluding completely tree-shaken modules, alongside the existing inline notices in `dist/index.cjs.LEGAL.txt`. Commit all generated -outputs; `pnpm check:dist` verifies them together. Full license sections in -package READMEs are retained when standalone files are absent. The version-bound +outputs; `pnpm check:dist` verifies them together. The version-bound supplement for `@nodable/entities` comes from the license at its npm-published `gitHead`; keep that provenance with any update. Attribution-only `NOTICE` and `COPYRIGHT` files are retained separately; they From a9e61d70b8c20fc8bafbd9dd8b30a968b0295afd Mon Sep 17 00:00:00 2001 From: Copilot <223556219+Copilot@users.noreply.github.com> Date: Thu, 12 Nov 2026 07:22:48 +0000 Subject: [PATCH 2/2] [Copilot Dreaming] Clarify that the dedicated token input is optional Copilot could add the dedicated token input to an existing environment-based setup because the input table calls it required. The native environment builder accepts the explicit alias and rejects combining it with the dedicated input, so describing the input as supported rather than required avoids that mistaken prerequisite. https://github.com/github/evals-action/blob/6e4c077e92194c7e75663d8d782426841047e887/src/native.ts#L56-L70 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 544e1ec..7b49efc 100644 --- a/README.md +++ b/README.md @@ -279,7 +279,7 @@ explicit lint rejects execution overrides. | `eval-paths` | Newline-separated literal paths for all/run. Spaces are preserved. No shell expansion. | | `tags` | Newline-separated native filters for all/run, e.g. `cost=free` or `flaky!=yes`. | | `github-token` | Defaults to `${{ github.token }}`. Used for model auth and PR reporting in all; artifact discovery and commenting in report; not forwarded in explicit lint/run. Discovery requires `actions: read`. | -| `copilot-token` | Optional explicit model token. Overrides automatic model auth in all; required for workflow-token auth in explicit run. | +| `copilot-token` | Optional explicit model token. Overrides automatic model auth in all; supports workflow-token auth in explicit run. | | `credential-env` | Advanced evaluator credential variable names, one per line, for BYOK/custom providers. Supplying these disables automatic model-token injection in all. Never put values here. Cannot list `COPILOT_GITHUB_TOKEN` with `copilot-token`. | | `report-token` | Optional bot/App comment token override for all/report. Discovery uses `github-token`, falling back to this token if absent. Human/PAT reporters are refused. Not valid on explicit lint/run. | | `report-id` | Shared lint/run/report identity, default `evals`; letters/digits/underscore/hyphen. Maximum 64 characters (59-character prefix for all). Advanced `evals-run` / `evals-lint` share the `evals` comment. |