Repository navigation
Fix dependency updates and review rejection diagnostics; qualify OCR 1.12.11 - #229
Merged
Merged
Conversation
This was referenced Oct 1, 2026
Merged
xeonvs
added a commit
that referenced
this pull request
Oct 1, 2026
Publish v0.11.2 with locked dependency-update consistency, bounded rejected-review diagnostics, private-result publication guards, and qualified OCR 1.12.11 including Jinja Rules. Feature PR #229 is merged; required Linux checks and TestPyPI development run 36841323350 passed. This PR sets stable version/epoch and the four-issue authorization set, renders Towncrier, updates the public toolkit example, and archives repository-complete work with external delivery pending. Next development remains 0.12.0; reconciliation remains at 0.11.1 until publication is independently confirmed. Tracked release issues: #223, #224, #227, #228. The Release workflow owns closure only after immutable receipt readback. Validation: 79 focused release/configuration/documentation tests, semantic review and secret gates. Required release PR checks and the post-merge release workflow own final publication, provenance and installed-artifact verification. The owner also included Dependabot PRs #230 and #231: Ruff 0.16.9 and httpx2/httpcore2 2.13.1. Their coherent lock updates are included here, with focused transport/process tests, Ruff checks and a current dependency audit; final-head hosted checks remain required.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependency updates could drift from the committed uv lockfile, while stale action-SHA assertions rejected valid updates. CI now validates the graph before use and consumes it without implicit resolution; the uv updater owns Python updates. The runtime PyJWT floor and targeted lock updates address current dependency advisories.
Rejected reviews now report bounded evidence-use diagnostics. Authorized private results, including failed execution, remain ineligible for posting and successful reports. OCR 1.12.11 is qualified and recommended, including Jinja file-selection and Rules checks.
Release scope: #223, #224, #227, #228. Incorporates and supersedes Dependabot PRs #225 and #226. Issue closure remains owned by the stable release workflow after immutable receipt readback.
Validation: focused dependency, rejection and compatibility tests; clean dependency audit and Python 3.12 resolver checks; real Linux amd64 and Darwin arm64 OCR probes; aggregate semantic review; local quality and secret gates. Package installation and supported Python/OS gates are owned by PR CI.