Repository navigation
Merge v4-beta to v4 (2026-11-09) - #237
Merged
Merged
Conversation
contrib/install.sh downloads tarballs via get.trivy.dev, which no longer resolves (NXDOMAIN), so every Trivy install exits with curl code 6 (aquasecurity/trivy#11537). trivy-action is affected too: setup-trivy runs the same script. Download the pinned release from GitHub Releases and verify its sha256, for amd64 and arm64. Where trivy-action is used, install first and pass skip-setup-trivy: true so the action runs the binary from PATH.
… bumps A package now counts as changed when the branch edits a file inside it, or when the branch changes a catalog entry that the package references via `catalog:` / `catalog:<name>` from `dependencies` or `peerDependencies`. Catalog entries referenced only from `devDependencies` or `optionalDependencies` require nothing. Changed files come from `git diff` against the merge base with the base branch, not from `pnpm --filter "[<since>]"`. pnpm 11.28 / 12.7 made that filter mark every catalog consumer as changed, devDependencies included, which failed samples-and-data#140 on parse-h5ad and parse-seurat: both only take block-tools from the catalog as a devDependency. Restores the runtime catalog rule that de2b0ee dropped. Missing yq, a missing merge base or an unreadable catalog now exit 2 instead of passing.
…catalog-bumps ci(changeset/check-coverage): require a changeset for runtime catalog bumps
|
Automatic reviews are disabled for this repository. Configure in Code Review Settings. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Merge v4-beta into v4