Frodo CLI 5.0.0-11

Added

• Implemented failure reporting for frodo role import -A, which now returns a failure when no files match or any file fails, while continuing to process remaining files. This improves feedback during bulk internal role imports. (#852)
• Introduced label-based tracking for release states, ensuring issues are marked released only when a CLI release includes the relevant library fix. (#848)
• Implemented the use of SIGNAL_TOKEN for starting the next gate, addressing issues with workflow initiation by github-actions[bot]. (#846)

Changed

• Updated frodo-lib to version 5.0.0-10, which includes updates to idm-export snapshots. (commit 7b002f6)
• Enhanced the issue worker to treat unimplemented features as enhancements rather than marking them as cannot-reproduce or invalid. (#853)
• Adjusted threat detection to remain only on issue-worker and pr-triage, optimizing resource usage by removing it from other gates. (#851)
• Improved issue triage by detecting already-fixed and cannot-reproduce issues, applying appropriate labels and closing them when necessary. (#850)
• Modified release processes to use RELEASE_TOKEN instead of GITHUB_TOKEN for triggering workflows, ensuring proper release closure. (#849)
• Updated issue handling to keep CLI issues open until a CLI release includes the necessary library fix, ensuring accurate release tracking. (#847)
• Enabled workflow dispatch to target specific issues, improving flexibility in issue management. (#842)
• Allowed issue readers to access unapproved content, ensuring comprehensive issue triage. (#840)

Removed

• Dropped the repo-wide skip-if-match filter to prevent unintended run cancellations, refining issue management processes. (#838)

Fixed

• Corrected filename matching for frodo role import -A, ensuring case-insensitive comparison against .internalrole.json to prevent silent skips of role files. (#852)
• Resolved an issue with skip-if-match label query by using a comma-separated form, preventing pre-activation failures. (#837)

What's Changed

• Add agentic workflows harness by @vscheuber in #822
• Compile agentic workflows by @vscheuber in #824
• Filter gate workflows to signal labels by @vscheuber in #831
• build(deps-dev): bump hono from 4.13.7 to 4.13.13 by @dependabot[bot] in #833
• Raise max-ai-credits by @vscheuber in #835
• Add cost controls on early gates by @vscheuber in #836
• Fix skip-if-match query by @vscheuber in #837
• Drop repo-wide skip-if-match by @vscheuber in #838
• Pass dispatch issue number into the prompt by @vscheuber in #839
• Allow issue readers to see unapproved content by @vscheuber in #840
• Allow dispatch to target an issue by @vscheuber in #842
• Per-related-repo secret for linked issues by @vscheuber in #845
• Start the next gate with SIGNAL_TOKEN by @vscheuber in #846
• Close delegated issues only after a CLI release includes the fix by @vscheuber in #847
• Track release state with labels by @vscheuber in #848
• Trigger the release closer from published releases by @vscheuber in #849
• Detect already-fixed and cannot-reproduce issues by @vscheuber in #850
• Keep threat detection only where it earns its cost by @vscheuber in #851
• Do not call an enhancement invalid by @vscheuber in #853
• Fix silent bulk internal-role import skips by @vscheuber with @Copilot in #852

Full Changelog: v5.0.0-10...v5.0.0-11