Skip to content

v5.177.1

Choose a tag to compare

@github-actions github-actions released this 16 Oct 04:22
· 408 commits to v5 since this release
c64aafe

Fixed

  • Fixed hive parking its own work on hard-suppress labels and never lifting them (#12002). The SHA-hold sweep now gives a kind/bug filed by a trusted reporter (OWNER/MEMBER/COLLABORATOR, per issue_filter.reporter_trust.trusted_associations) the soft needs-sha label instead of the hard hold (issues.sha_hold_trusted_label; set it to hold for the old behaviour), and swaps a SHA-hold hold it already applied to such an issue for the soft label. A new hard-suppress reconcile (issues.lift_hive_hard_suppress, default on, every issues.hard_suppress_reconcile_interval, default 30m) lifts an open issue's hold/blocked once a PR referencing the issue has merged after the label was applied, but only when hive provably applied it: the newest label event is a labeled by the App bot, and for hold the <!-- hive:sha-hold --> notice goes with it. It posts one note carrying <!-- hive:hard-suppress-lifted -->. Labels a human applied or re-applied are never lifted.

SBOMs: SPDX JSON, generated by Syft against the linux/amd64 image digest, attached below for hive, hive-contributor, and hive-hub. They cover linux/amd64 only — see releases.md for why linux/arm64 is not scanned separately.

NOTICE: third-party license attribution for the Go module dependencies compiled into these images, attached below. Does not cover base-image OS packages or the Node.js/tmux layers built from source — see releases.md for the exact boundary.