Skip to content

Evolith Core 1.3.8 — PR gate on the Marketplace, MCP server in the registry

Latest

Choose a tag to compare

@beyondnetPeru beyondnetPeru released this 14 Sep 15:46
· 160 commits to main since this release
e71687e

Evolith runs architecture rules — layering, dependencies, security, CI/CD, ADRs — against a repository from CI and fails the PR. A rule it could not evaluate is reported as a failure, never as a silent pass, so coverage and compliance stop looking identical.

Use it as a PR gate

- uses: beyondnetcode/evolith_arch32@v1.3.8
  with:
    fail-on-violation: 'true'   # exit 2 = the gate blocked; 1/3 = the gate never ran

Outputs: compliance-status (compliant | non-compliant | invalid-input | error), violations-count, issues-count, exit-code, report-path.
error and invalid-input mean the repository was not evaluated — they are not weaker forms of non-compliant.

What ships at this tag

  • Marketplace-ready manifest — action.yml description under GitHub's 125-character limit, and guard 64 now counts it so the publish dialog cannot reject it again (#702).
  • Five high advisories closed — multer 2.3.0, js-yaml 4.3.2; npm audit reports 0 high/critical (#703).
  • A front page for a first-time reader — README (EN/ES) rewritten: what it is → who it is for → two commands → four terms defined → in CI → what is inside → what it is not (#701).
  • Conceptual view of Evolith — five processes, technologies, protocols and the source of each fact, as a shareable SVG (#700).
  • Image builds gate the PR — a green gate means an image was actually built (#679, #680).
  • Runtime images stop shipping their build tree — core-api 1.96 GB → 862 MB, agent-runtime-api 2.49 GB → 1.13 GB, mcp-server 1.89 GB → 825 MB (GT-692, since v1.3.7).
  • @beyondnet/evolith-mcp 1.3.3 is listed in the MCP registry as io.github.beyondnetcode/evolith.
  • @beyondnet/evolith-cli 1.3.2 — the exit-code taxonomy this action relies on: 0 pass · 1 tool failure · 2 blocked verdict · 3 invalid input. Package versions are unchanged at this tag.

Try it in 10 seconds

npx -y @beyondnet/evolith-cli init --name my-sat --yes
npx -y @beyondnet/evolith-cli validate --engine opa

Full changelog: CHANGELOG.md · Diff: v1.3.0...v1.3.8