Skip to content

v4.61.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 05:06
· 1236 commits to main since this release
v4.61.0
405e6bf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Minor. Reviewing someone else's PR takes the PR's own words safely, and test folders stop flooding the privacy check; the PRs kj opens carry the Karajan label.

Added

  • kj review --third-party --task-file (#2330): the PR's title and description reach the reviewer as untrusted context from the PR author, between markers the text cannot forge and under a label that says it is data, never instructions. The positional task works the same; passing both is an error.
  • test_paths in the reviewed repo's .karajan/privacy.yml (#2329): globs such as src/test/** where generic personal-data findings are discarded and counted in the check's detail. The personal denylist and secret shapes still block there, the file is still read at the base of the range so a PR cannot exempt itself, and a glob with no folder name (**, **/*) is refused.
  • The Karajan label on the PRs kj opens (#2315): created when the repo lacks it, idempotent, and a failure to label is logged without losing the PR. It means "went through Karajan", not "written by an AI". PRs the host agent opens itself are the subject of the proposed ADR 0023.

Fixed

  • kj review --third-party fails loudly on the own-work flags it used to ignore (--staged, --base-ref, --walked, --no-sonar...), instead of accepting them in silence.
Assets 8
Loading