Skip to content

Commit b92c6a3

Browse files
rldyourmndrldyourmnd
committed
chore(release): harden Codex 1.0.0 runtime pins
1 parent 98bcb04 commit b92c6a3

19 files changed

Lines changed: 83 additions & 36 deletions

‎.github/dependabot.yml‎

Lines changed: 21 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,26 @@
11
version: 2
2+
3+
# Dependabot keeps third-party GitHub Actions visible for review. Runtime
4+
# package freshness is handled by repository validators because Codex/MCP pins
5+
# are distributed across shell installers, TOML agents, and source manifests.
26
updates:
3-
- package-ecosystem: "github-actions"
4-
directory: "/"
7+
- package-ecosystem: github-actions
8+
directory: /
59
schedule:
6-
interval: "weekly"
7-
day: "monday"
10+
interval: weekly
11+
day: monday
812
time: "06:00"
9-
timezone: "Etc/UTC"
13+
timezone: Etc/UTC
1014
open-pull-requests-limit: 5
15+
labels:
16+
- ci
17+
- dependencies
18+
commit-message:
19+
prefix: ci
20+
include: scope
21+
groups:
22+
actions-minor-and-patch:
23+
applies-to: version-updates
24+
update-types:
25+
- minor
26+
- patch

‎CHANGELOG.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,13 @@ The format follows Keep a Changelog, and marketplace/plugin versions follow Sema
66

77
## [Unreleased]
88

9+
## [1.0.0] - 2026-05-28
10+
11+
### Changed
12+
13+
- Shared MCP runtime pins now track `semgrep==1.164.0` and `shadcn@4.8.2`;
14+
managed Codex subagent TOML files and fixture tests were updated in lockstep.
15+
916
## [0.5.0] - 2026-05-27
1017

1118
### Changed

‎VERSION‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
0.5.0
1+
1.0.0

‎config/mcp-runtime-versions.env‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,9 +9,9 @@ CODEX_CLI_VERSION=0.134.0
99
GITHUB_MCP_SERVER_VERSION=1.0.5
1010
MCP_PYTHON_SDK_VERSION=1.27.1
1111
SERENA_AGENT_VERSION=1.5.3
12-
SEMGREP_VERSION=1.163.0
12+
SEMGREP_VERSION=1.164.0
1313
SEQUENTIAL_THINKING_MCP_VERSION=2025.12.18
1414
PLAYWRIGHT_MCP_VERSION=0.0.75
1515
CHROME_DEVTOOLS_MCP_VERSION=1.1.1
1616
CONTEXT7_MCP_VERSION=3.0.0
17-
SHADCN_VERSION=4.8.1
17+
SHADCN_VERSION=4.8.2

‎plugins/rldyour-mcps/.mcp.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -92,7 +92,7 @@
9292
"command": "uvx",
9393
"args": [
9494
"--from",
95-
"semgrep==1.163.0",
95+
"semgrep==1.164.0",
9696
"semgrep",
9797
"mcp"
9898
],
@@ -102,7 +102,7 @@
102102
"shadcn": {
103103
"command": "bunx",
104104
"args": [
105-
"shadcn@4.8.1",
105+
"shadcn@4.8.2",
106106
"mcp"
107107
],
108108
"startup_timeout_sec": 90,

‎plugins/rldyour-mcps/README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@ Local MCP servers use `startup_timeout_sec = 90`. Remote MCP servers use `startu
5757
| `deepwiki` | Repository documentation and explanations | remote URL |
5858
| `grep` | Search across public GitHub repositories | remote URL |
5959
| `github` | GitHub repositories, issues, pull requests, users, and context | `github-mcp-server stdio`, `GITHUB_PERSONAL_ACCESS_TOKEN` |
60-
| `semgrep` | Static analysis and security checks | `uvx --from semgrep==1.163.0 semgrep mcp` |
60+
| `semgrep` | Static analysis and security checks | `uvx --from semgrep==1.164.0 semgrep mcp` |
6161
| `shadcn` | shadcn/ui registry work | `bunx` |
6262
| `dart-flutter` | Dart/Flutter MCP for Dart and Flutter projects | `dart` |
6363
| `figma` | Figma design context | remote URL, OAuth |

‎pyproject.toml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[project]
22
name = "rldyour-codex"
3-
version = "0.5.0"
3+
version = "1.0.0"
44
description = "Personal Codex marketplace with rldyour plugins, MCP servers, skills, hooks, and SDLC tooling."
55
readme = "README.md"
66
requires-python = ">=3.13,<3.14"

‎scripts/validate_instruction_docs.py‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,9 +29,12 @@
2929
"docs/contract-matrix.md",
3030
"system/AGENTS.md",
3131
)
32+
RESEARCH_DIR = ".serena/research"
3233
FORBIDDEN_ACTIVE_CLAIMS = {
3334
"[features].plugin_hooks = true": "Codex 0.134 treats plugin_hooks as a removed feature flag",
3435
"features.plugin_hooks = true": "Codex 0.134 treats plugin_hooks as a removed feature flag",
36+
"requires `[features].plugin_hooks = true`": "plugin_hooks is removed in current Codex",
37+
"forces `plugin_hooks = true`": "plugin_hooks is removed in current Codex",
3538
"active `hooks`, `plugin_hooks`, and `multi_agent`": "plugin hooks are verified through hooks/list, not an active feature flag",
3639
"active hooks, plugin_hooks, and multi_agent": "plugin hooks are verified through hooks/list, not an active feature flag",
3740
":danger-no-sandbox": "current Codex built-ins use :danger-full-access for the danger profile",
@@ -90,6 +93,26 @@ def validate_file_content(root: Path, relative: str, errors: list[str], warnings
9093
errors.append(f"{relative}: must be first-class Claude Code memory, not only @AGENTS.md")
9194

9295

96+
def validate_research_content(root: Path, errors: list[str], warnings: list[str]) -> None:
97+
research_root = root / RESEARCH_DIR
98+
if not research_root.is_dir():
99+
return
100+
for path in sorted(research_root.glob("*.md")):
101+
relative = path.relative_to(root).as_posix()
102+
text = read_text(path)
103+
header = "\n".join(text.splitlines()[:16])
104+
superseded = "SUPERSEDED ON" in header
105+
for needle, reason in FORBIDDEN_ACTIVE_CLAIMS.items():
106+
if needle not in text:
107+
continue
108+
if superseded:
109+
warnings.append(f"{relative}: contains superseded historical claim {needle!r}: {reason}")
110+
else:
111+
errors.append(
112+
f"{relative}: stale research claim {needle!r} requires a SUPERSEDED banner or rewrite: {reason}"
113+
)
114+
115+
93116
def parse_args() -> argparse.Namespace:
94117
parser = argparse.ArgumentParser(description="Validate rldyour AGENTS.md and .claude/CLAUDE.md policy.")
95118
parser.add_argument("--root", default=".", help="Repository root to inspect.")
@@ -123,6 +146,7 @@ def main() -> int:
123146

124147
for relative in ACTIVE_DOCS:
125148
validate_file_content(root, relative, errors, warnings)
149+
validate_research_content(root, errors, warnings)
126150

127151
payload = {
128152
"state": state,

‎system/agents/architecture-reviewer.toml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,13 +23,13 @@ mcp_servers.chrome-devtools.tool_timeout_sec = 180
2323

2424
mcp_servers.semgrep.enabled = false
2525
mcp_servers.semgrep.command = "uvx"
26-
mcp_servers.semgrep.args = ["--from", "semgrep==1.163.0", "semgrep", "mcp"]
26+
mcp_servers.semgrep.args = ["--from", "semgrep==1.164.0", "semgrep", "mcp"]
2727
mcp_servers.semgrep.startup_timeout_sec = 90
2828
mcp_servers.semgrep.tool_timeout_sec = 180
2929

3030
mcp_servers.shadcn.enabled = false
3131
mcp_servers.shadcn.command = "bunx"
32-
mcp_servers.shadcn.args = ["shadcn@4.8.1", "mcp"]
32+
mcp_servers.shadcn.args = ["shadcn@4.8.2", "mcp"]
3333
mcp_servers.shadcn.startup_timeout_sec = 90
3434
mcp_servers.shadcn.tool_timeout_sec = 120
3535

‎system/agents/browser-tester.toml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,13 +23,13 @@ mcp_servers.chrome-devtools.tool_timeout_sec = 180
2323

2424
mcp_servers.semgrep.enabled = false
2525
mcp_servers.semgrep.command = "uvx"
26-
mcp_servers.semgrep.args = ["--from", "semgrep==1.163.0", "semgrep", "mcp"]
26+
mcp_servers.semgrep.args = ["--from", "semgrep==1.164.0", "semgrep", "mcp"]
2727
mcp_servers.semgrep.startup_timeout_sec = 90
2828
mcp_servers.semgrep.tool_timeout_sec = 180
2929

3030
mcp_servers.shadcn.enabled = false
3131
mcp_servers.shadcn.command = "bunx"
32-
mcp_servers.shadcn.args = ["shadcn@4.8.1", "mcp"]
32+
mcp_servers.shadcn.args = ["shadcn@4.8.2", "mcp"]
3333
mcp_servers.shadcn.startup_timeout_sec = 90
3434
mcp_servers.shadcn.tool_timeout_sec = 120
3535

0 commit comments

Comments
 (0)