Skip to content

Commit 62d7c35

Browse files
rldyourmndrldyourmnd
committed
chore(release): gemini 1.7.20 (other)
1 parent a95a0df commit 62d7c35

20 files changed

Lines changed: 54 additions & 159 deletions

‎.gemini/hooks/session_start_context.sh‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ if [[ -f "$script_dir/../VERSION" ]]; then
99
elif [[ -f "$script_dir/../../VERSION" ]]; then
1010
export RLDYOUR_ANTIGRAVITY_ADAPTER_VERSION="$(<"$script_dir/../../VERSION")"
1111
else
12-
export RLDYOUR_ANTIGRAVITY_ADAPTER_VERSION="1.7.18"
12+
export RLDYOUR_ANTIGRAVITY_ADAPTER_VERSION="1.7.20"
1313
fi
1414
printf '%s\n' "rldyour-antigravity-cli SessionStart hook received input" >&2
1515

@@ -18,7 +18,7 @@ import json
1818
import os
1919
2020
_ = os.environ.get("RLDYOUR_GEMINI_HOOK_INPUT", "")
21-
version = os.environ.get("RLDYOUR_ANTIGRAVITY_ADAPTER_VERSION", "1.7.18")
21+
version = os.environ.get("RLDYOUR_ANTIGRAVITY_ADAPTER_VERSION", "1.7.20")
2222
message = (
2323
f"rldyour-antigravity-cli adapter={version} runtime=antigravity-cli@1.0.16; "
2424
"standard mode is owner-led; cmux orchestration is visible-terminal-only; "

‎.gemini/policies/rldyour-browser-routing.toml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
name = "rldyour-browser-routing"
2-
version = "1.7.18"
2+
version = "1.7.20"
33
scope = "antigravity-adapter"
44

55
[providers]

‎.gemini/policies/rldyour-git-safety.toml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
name = "rldyour-git-safety"
2-
version = "1.7.18"
2+
version = "1.7.20"
33
scope = "antigravity-adapter"
44

55
[rules]

‎.gemini/policies/rldyour-project-policy.toml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
name = "rldyour-project-policy"
2-
version = "1.7.18"
2+
version = "1.7.20"
33
scope = "antigravity-adapter"
44

55
[execution]

‎.github/branch-protection/main.json‎

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,15 @@
33
"required_status_checks": [
44
"Validate",
55
"Pytest",
6-
"Actionlint",
7-
"CodeQL",
8-
"Secret scan",
6+
"Actionlint / actionlint",
7+
"CodeQL (python) / CodeQL (python)",
8+
"CodeQL (actions) / CodeQL (actions)",
9+
"Secret scan / Gitleaks secret scan",
910
"Dependency check",
10-
"Scorecard",
11-
"Cross-platform smoke"
11+
"Scorecard / OSSF Scorecard analysis",
12+
"Cross-platform smoke / smoke (ubuntu-latest)",
13+
"Cross-platform smoke / smoke (windows-latest)",
14+
"Cross-platform smoke / smoke (macos-latest)"
1215
],
1316
"strict_required_status_checks": true,
1417
"allow_force_pushes": false,

‎.github/workflows/actionlint.yml‎

Lines changed: 3 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -27,44 +27,8 @@ concurrency:
2727
jobs:
2828
actionlint:
2929
name: Actionlint
30-
runs-on: ubuntu-latest
31-
timeout-minutes: 10
3230
permissions:
3331
contents: read
34-
steps:
35-
- name: Harden runner (egress block + explicit allowlist)
36-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
37-
with:
38-
egress-policy: block
39-
allowed-endpoints: >
40-
agent.api.stepsecurity.io:443
41-
api.github.com:443
42-
github.com:443
43-
codeload.github.com:443
44-
objects.githubusercontent.com:443
45-
release-assets.githubusercontent.com:443
46-
47-
- name: Checkout
48-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
49-
with:
50-
persist-credentials: false
51-
52-
- name: Download actionlint (pinned + checksum-verified)
53-
run: |
54-
set -euo pipefail
55-
# actionlint v1.7.12 - Linux amd64 tarball SHA256 from upstream
56-
# https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_checksums.txt
57-
ACTIONLINT_VERSION='1.7.12'
58-
ACTIONLINT_SHA256='8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8'
59-
curl -fsSL -o /tmp/actionlint.tar.gz \
60-
"https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz"
61-
echo "${ACTIONLINT_SHA256} /tmp/actionlint.tar.gz" | sha256sum -c -
62-
tar -xzf /tmp/actionlint.tar.gz -C /tmp actionlint
63-
install -m 0755 /tmp/actionlint /usr/local/bin/actionlint
64-
actionlint --version
65-
66-
- name: Run actionlint on all workflows
67-
run: actionlint -color
68-
69-
- name: Validate remote action pins
70-
run: python3 scripts/validate_action_pins.py
32+
uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/actionlint.yml@21bd3f7c3bbcbd7a9ecd3475b293d9e65aa8563a # 0.2.2
33+
with:
34+
post_command: python3 scripts/validate_action_pins.py

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -18,8 +18,6 @@ concurrency:
1818
jobs:
1919
codeql:
2020
name: CodeQL (${{ matrix.language }})
21-
runs-on: ubuntu-latest
22-
timeout-minutes: 20
2321
permissions:
2422
actions: read
2523
contents: read
@@ -28,24 +26,6 @@ jobs:
2826
fail-fast: false
2927
matrix:
3028
language: [python, actions]
31-
steps:
32-
- name: Harden runner
33-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
34-
with:
35-
egress-policy: audit
36-
37-
- name: Checkout
38-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
39-
with:
40-
persist-credentials: false
41-
42-
- name: Initialize CodeQL
43-
uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
44-
with:
45-
languages: ${{ matrix.language }}
46-
queries: security-and-quality
47-
48-
- name: Analyze
49-
uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
50-
with:
51-
category: "/language:${{ matrix.language }}"
29+
uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/public-codeql.yml@21bd3f7c3bbcbd7a9ecd3475b293d9e65aa8563a # 0.2.2
30+
with:
31+
languages: '["${{ matrix.language }}"]'

‎.github/workflows/cross-platform.yml‎

Lines changed: 6 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -17,18 +17,13 @@ concurrency:
1717
jobs:
1818
smoke:
1919
name: Cross-platform smoke
20-
runs-on: ${{ matrix.os }}
21-
timeout-minutes: 15
20+
permissions:
21+
contents: read
2222
strategy:
2323
fail-fast: false
2424
matrix:
2525
os: [ubuntu-latest, windows-latest, macos-latest]
26-
steps:
27-
- name: Checkout
28-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
29-
- name: Set up Python
30-
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
31-
with:
32-
python-version: "3.13"
33-
- name: Validate config
34-
run: python3 scripts/validate_gemini_config.py --strict
26+
uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/cross-platform-smoke.yml@21bd3f7c3bbcbd7a9ecd3475b293d9e65aa8563a # 0.2.2
27+
with:
28+
os_list: '["${{ matrix.os }}"]'
29+
command: python3 scripts/validate_gemini_config.py --strict

‎.github/workflows/dependency-review.yml‎

Lines changed: 5 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,7 @@ on:
44
pull_request:
55
branches: [main]
66

7-
permissions:
8-
contents: read
9-
pull-requests: read
7+
permissions: {}
108

119
concurrency:
1210
group: dependency-review-${{ github.workflow }}-${{ github.ref }}
@@ -15,17 +13,7 @@ concurrency:
1513
jobs:
1614
dependency-review:
1715
name: Dependency review
18-
runs-on: ubuntu-latest
19-
timeout-minutes: 10
20-
steps:
21-
- name: Harden runner
22-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
23-
with:
24-
egress-policy: audit
25-
- name: Checkout
26-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
27-
with:
28-
persist-credentials: false
29-
- name: Dependency review
30-
uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
31-
16+
permissions:
17+
contents: read
18+
pull-requests: write
19+
uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/public-dependency-review.yml@21bd3f7c3bbcbd7a9ecd3475b293d9e65aa8563a # 0.2.2

‎.github/workflows/scorecard.yml‎

Lines changed: 8 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -3,16 +3,11 @@ name: Scorecard
33
on:
44
push:
55
branches: [main]
6-
pull_request:
7-
branches: [main]
8-
branch_protection_rule:
96
schedule:
107
- cron: "21 6 * * 3"
118
workflow_dispatch:
129

13-
permissions:
14-
contents: read
15-
id-token: write
10+
permissions: {}
1611

1712
concurrency:
1813
group: scorecard-${{ github.workflow }}-${{ github.ref }}
@@ -21,22 +16,10 @@ concurrency:
2116
jobs:
2217
scorecard:
2318
name: Scorecard
24-
runs-on: ubuntu-latest
25-
timeout-minutes: 15
26-
steps:
27-
- name: Checkout
28-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
29-
with:
30-
persist-credentials: false
31-
- name: Run Scorecard
32-
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
33-
with:
34-
results_file: results.json
35-
results_format: json
36-
publish_results: false
37-
- name: Upload Scorecard JSON
38-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
39-
with:
40-
name: scorecard-results
41-
path: results.json
42-
retention-days: 14
19+
permissions:
20+
id-token: write
21+
contents: read
22+
actions: read
23+
uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/public-scorecard-json.yml@21bd3f7c3bbcbd7a9ecd3475b293d9e65aa8563a # 0.2.2
24+
with:
25+
publish_results: false

0 commit comments

Comments
 (0)