v3.6.0

What's new

Features

automation: Fro Bot's scheduled repository stewardship and autohealing have been consolidated into a single daily agent pass (#748). Previously the bot ran a separate Monday maintenance schedule alongside its daily autoheal run; that split schedule, dispatch mode, and prompt are gone, and stale-item detection, workflow-health checks, and repository metrics now all feed into one daily autoheal report. The consolidated pass combines proactive detection with bounded reactive repair (schedule-only issue healing, deduplicated, capped at a one-PR mutation budget per run) and adds progressive-improvement tracking that compares each report against prior reports, solutions, and recurring failures over time. Cross-project intelligence was also expanded, surfacing evidence-backed adopt/monitor/reject dispositions rather than raw signal, and agent-targeted follow-ups were replaced with cold-start notes any LLM agent can pick up without prior context.

To keep this safe to run unattended, the change enforces exactly one canonical Daily Autohealing Report (migrating any bot-authored legacy weekly/daily reports), constrains automatic issue triage to read-only analysis, and prevents checkout credentials from persisting across steps. Two follow-up commits harden this further: report-continuity tests were added to guard the new report lifecycle, and autoheal report writes were made atomic so a crash or interrupted run can no longer leave a corrupted or partial report file on disk. Scheduled and manual agent runs are now serialized so they cannot overlap, and GITHUB_TOKEN permissions remain read-only, with writes continuing to flow through the dedicated FRO_BOT_PAT.

Also in this release

• build(dev): Updated OpenCode to v1.18.11 (#750).
• chore(deps): Updated github/codeql-action to v4.37.6 (#751).
• chore(deps): Updated fro-bot/agent to v0.96.1 (#749).

Compare

v3.5.9...v3.6.0