v5.177.0

Added

• The bead synthesizer now sends conditional (If-None-Match) PR GETs and reuses cached PRs on 304, and knowledge.bead_synthesizer.max_api_calls_per_cycle (default 40; HIVE_BEAD_SYNTH_MAX_API_CALLS still overrides) caps charged calls per cycle (#12252, part of #12005).
• Expose per-tier proxy attempted-vs-blocked write counters as write_counters in GET /api/evidence/summary, and point to the endpoint from the review evidence docs (#12177, #12255).
• Spokes now send a 90-day review-evidence summary (verdicts, false approves/blocks, merged and reverted counts, confidence calibration, reviewer/author model families and the self-authored auto-merge posture) as an evidence block on the hub heartbeat; the hub sanitizes and stores it with the other quadrant inputs. Spokes without the block are unchanged (#12114).
• Re-run the failed jobs on open PRs stamped <!-- hive-shared-ci-<n> --> once [shared-ci] incident #<n> closes, at most once per PR per incident (recorded with a <!-- hive-shared-ci-rerun-<n> --> comment), so PRs left red by a broken baseline get a fresh verdict without a human push. On by default; disable with shared_ci_rerun.enabled: false (#12253).

Fixed

• fix(github): reuse labelPresent in hasIssueNeedsHumanLabel (#12256)

---

SBOMs: SPDX JSON, generated by Syft against the linux/amd64 image digest, attached below for hive, hive-contributor, and hive-hub. They cover linux/amd64 only — see releases.md for why linux/arm64 is not scanned separately.

NOTICE: third-party license attribution for the Go module dependencies compiled into these images, attached below. Does not cover base-image OS packages or the Node.js/tmux layers built from source — see releases.md for the exact boundary.