Skip to content

chore(deps): bump pnpm/action-setup from f40ffcd9367d9f12939873eb1018b921a783ffaa to b906affcce14559ad1aafd4ab0e942779e9f58b1#5

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/pnpm/action-setup-b906affcce14559ad1aafd4ab0e942779e9f58b1
Closed

chore(deps): bump pnpm/action-setup from f40ffcd9367d9f12939873eb1018b921a783ffaa to b906affcce14559ad1aafd4ab0e942779e9f58b1#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/pnpm/action-setup-b906affcce14559ad1aafd4ab0e942779e9f58b1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 28, 2026

Bumps pnpm/action-setup from f40ffcd9367d9f12939873eb1018b921a783ffaa to b906affcce14559ad1aafd4ab0e942779e9f58b1.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from f40ffcd9367d9f12939873eb1018b921a783ffaa to b906affcce14559ad1aafd4ab0e942779e9f58b1.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@f40ffcd...b906aff)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: b906affcce14559ad1aafd4ab0e942779e9f58b1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 28, 2026

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from webdevcom01-cell as a code owner March 28, 2026 18:23
@vercel
Copy link
Copy Markdown

vercel Bot commented Mar 28, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
agent-studio Ready Ready Preview, Comment Mar 28, 2026 6:26pm

Request Review

@webdevcom01-cell
Copy link
Copy Markdown
Owner

Closing — major version bump or SHA update created before ignore rules were active. Will handle manually when ready.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 28, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/pnpm/action-setup-b906affcce14559ad1aafd4ab0e942779e9f58b1 branch March 28, 2026 19:09
webdevcom01-cell added a commit that referenced this pull request May 7, 2026
Critical:
- pipeline-manager: add saveStepOutput — saves gate output without advancing currentStep
- orchestrator: gate BLOCK uses saveStepOutput instead of onStepComplete (fix Bug #1)
- orchestrator: export IMPLEMENTATION_STEPS + GATE_STEPS for retry route
- orchestrator: resume pre-seeding uses slice(0,4000) instead of 2000 (Bug #4)
- retry/route: smart startFromStep — gate BLOCK steps back to last impl step (Bug #1)
- retry/route: trim existingStepResults to steps before startFromStep
- retry/route: add requireApproval to addPipelineRunJob (Bug #5)
- retry/route: allow CANCELLED runs to be retried (Bug C3)

UI:
- page.tsx: show stepResults for FAILED runs — gate reviewer output visible
- page.tsx: PipelineRun interface adds modelId, useSmartRouting, requireApproval
- page.tsx: isActive includes AWAITING_APPROVAL for inner SWR refresh (Bug C2)
- page.tsx: Retry button shown for CANCELLED runs too (Bug C3)

Performance:
- pipeline-manager: listPipelineRuns uses SELECT_LIST_FIELDS — excludes
  stepResults (~28KB/run) and finalOutput (~15KB/run) from list queries,
  reducing payload from ~1MB to ~50KB for 20 runs (Bug #3)
webdevcom01-cell added a commit that referenced this pull request May 24, 2026
- Migration 20260530000000: enable RLS + FORCE on Goal, composite index
  on (organizationId, id) — note: (organizationId, status) already exists;
  SELECT/INSERT/UPDATE/DELETE policies for app_user, grants to app_user + admin_user
- goals/route.ts: wrap findMany(GET) and create(POST) with withOrgContext
- goals/[goalId]/route.ts: loadGoal() uses withAdminBypass (pre-auth);
  GET findUnique (incl. CompanyMission JOIN), PATCH update, DELETE count +
  delete all wrapped with withOrgContext(goal.organizationId)
- agents/[agentId]/goals/route.ts: goal existence check uses withAdminBypass
  (agent's orgId not in scope for this check)
- lib/templates/template-engine.ts: goal.create in importTemplate wrapped
  with withOrgContext(organizationId) — called from API routes only

Cross-table JOIN: GET /goals/[goalId] includes mission (CompanyMission, already
RLS-enforced) — both sub-queries run in the same withOrgContext transaction,
same app.current_org_id. Safe.

RLS_ENFORCEMENT_ENABLED=false; wrapping is a no-op until flag flip.
webdevcom01-cell added a commit that referenced this pull request May 24, 2026
Migration 20260604000000: TENANT_DIRECT RLS on ApprovalPolicy.
Pre-auth lookups (loadPolicy, decisions pre-auth) use withAdminBypass —
same pattern as loadDepartment/loadGoal from migrations #4/#5.
CRUD routes use withOrgContext with org ID from loadPolicy result.
checkPolicies gains optional organizationId param; requestApproval wraps
the policy findUnique in withOrgContext.
processTimeouts unchanged — cross-org cron relies on DATABASE_URL BYPASSRLS.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant