v2.8.5
Maintenance release.
Fixes
- The daily review-bot sweep no longer reds
mainwhen it cannot push its follow-up branch. The follow-up-PR step is now best-effort, so a write-denied token logs and skips instead of failing the scheduled job.
Dependencies
- Web UI and CI toolchain updates: react, tailwindcss, radix-ui, @tanstack/react-query, recharts, vite, react-router-dom, autoprefixer, @types/node, @types/vscode, reportlab 5, actions/checkout v7, attest-build-provenance, trufflehog, zizmor, setup-uv, uv, grafana, the redis Helm chart, and the oss-fuzz base image.
A note on versioning
2.8.0 through 2.8.4 were tagged during release attempts that failed mid-pipeline: a CI regression on one, and a tag pushed with GITHUB_TOKEN that did not start the publish workflow on the others. None of those tags were published. The published line on PyPI is 2.7.0 -> 2.8.2 -> 2.8.5. The publish step is now re-runnable via workflow_dispatch, so versioning is sequential from here.