Closed
Conversation
Supprime le logging en cleartext de valeurs canary PII dans les assertions de test (pii.rs), annote le faux positif HTTPS dans credential_check.rs, et ajoute nosemgrep sur le token de test assemblé dynamiquement (tests.rs). Résout: 4 alertes HIGH CodeQL (pii.rs L689/L1151/L1172/L1183), 1 alerte HIGH CodeQL (credential_check.rs L70), 1 faux positif Semgrep (tests.rs L58). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Re-vérifie is_instance_running avant spawn_background_service pour éviter le faux-démarrage quand le flow credentials interactif prend du temps. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Ajoute ComplexityHint (trivial/medium/complex), le tool MCP grob_hint (one-shot slot), la résolution multi-source dans dispatch (header → metadata → MCP slot), et l'injection dans tools/list. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
fix(security): résoudre 6 alertes CodeQL/Semgrep cleartext logging
fix(exec): vérifier la santé avant spawn pour éviter le faux-démarrage
Les types ComplexityHint et le champ grob_hint dans AppState référencent le module MCP qui n'existe pas quand le feature est désactivé. Ajoute les guards #[cfg(feature = "mcp")] manquants dans dispatch/mod.rs et server/mod.rs pour corriger les builds feature powerset. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
feat(mcp): ajouter le tool grob_hint + header X-Grob-Hint
Contributor
Author
|
Obsolète : v0.36.5 inclus dans sync-main v0.36.6 (PR #151, mergée). |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated sync triggered by tag
v0.36.5. This PR promotes the develop branch to main so the tag can be released. Safe to auto-merge once CI passes.