chore(ci): bump stefanzweifel/git-auto-commit-action from 5 to 7

[dependabot]

Bumps stefanzweifel/git-auto-commit-action from 5 to 7.

Release notes

Sourced from stefanzweifel/git-auto-commit-action's releases.

v7.0.0

Added

• Restore skip_fetch, skip_checkout, create_branch (#388) @​stefanzweifel
• Restore Detached State Detection (#393) @​stefanzweifel
• Add Support for Tag Messages (#391) @​EliasBoulharts

Changed

• Run Action on Node 24 (#389) @​stefanzweifel

Dependency Updates

• Bump actions/checkout from 4 to 5 (#386) [@dependabot[bot]](https://github.com/@[dependabot[bot]](https://github.com/apps/dependabot))

v6.0.1

Fixed

• Disable Check if Repo is in Detached State (#379) @​stefanzweifel

v6.0.0

Added

• Throw error early if repository is in a detached state (#357)

Fixed

• Fix PAT instructions with Dependabot (#376) @​Dreamsorcerer

Removed

• Remove support for create_branch, skip_checkout, skip_Fetch (#314)

v5.2.0

Added

• Add create_git_tag_only option to skip commiting and always create a git-tag. (#364) @​zMynxx
• Add Test for create_git_tag_only feature (#367) @​stefanzweifel

Fixed

• docs: Update README.md per #354 (#361) @​rasa

v5.1.0

Changed

• Include github.actor_id in default commit_author (#354) @​parkerbxyz

Fixed

... (truncated)

Changelog

Sourced from stefanzweifel/git-auto-commit-action's changelog.

v7.1.0 - 2025-12-17

Added

• Add skip_push input option (#401) @​kvanzuijlen

Changes

• docs: fix typo in README.md (#400) @​GideonBear

Dependency Updates

• Bump actions/checkout from 5 to 6 (#399) [@dependabot[bot]](https://github.com/@[dependabot[bot]](https://github.com/apps/dependabot))
• Bump bats from 1.12.0 to 1.13.0 (#398) [@dependabot[bot]](https://github.com/@[dependabot[bot]](https://github.com/apps/dependabot))

v7.0.0 - 2025-10-12

Added

• Restore skip_fetch, skip_checkout, create_branch (#388) @​stefanzweifel
• Restore Detached State Detection (#393) @​stefanzweifel
• Add Support for Tag Messages (#391) @​EliasBoulharts

Changed

• Run Action on Node 24 (#389) @​stefanzweifel

Dependency Updates

• Bump actions/checkout from 4 to 5 (#386) [@dependabot[bot]](https://github.com/@[dependabot[bot]](https://github.com/apps/dependabot))

v6.0.1 - 2025-06-11

Fixed

• Disable Check if Repo is in Detached State (#379) @​stefanzweifel

v6.0.0 - 2025-06-10

Added

• Throw error early if repository is in a detached state (#357)

Fixed

• Fix PAT instructions with Dependabot (#376) @​Dreamsorcerer

Removed

• Remove support for create_branch, skip_checkout, skip_Fetch (#314)

... (truncated)

Commits

• 4a55954 Update README.md
• 9f6c933 Add hooks to run shell snippets around git operations (#411)
• c365a74 Emit warning for pull_request_target trigger usage (#410)
• d28176c Bump actions/checkout from 6 to 7 (#409)
• 25df622 Add EXAMPLES.md
• 32e9844 docs(action): fix input and output descriptions in action.yml (#406)
• a3ed46f docs: fix typos, grammar, and formatting across markdown files (#408)
• b4d688c docs: fix broken and redirecting URLs in README.md (#407)
• f53a62c README: clearify meaning of the repository field (#404)
• 4fc4bbf Bump release-drafter/release-drafter from 6 to 7 (#403)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Backend parity gate — graphify vs built-in tree-sitter

✅ PASS — the built-in backend must stay within tolerance of graphify on the reference fixture.

Metric	graphify	built-in
code nodes	65	79
mean reduction	6.11×	6.79×
faithfulness delta	+0.008	+0.198
fact recall	0.582	0.772
grounding	0.889	1.000

Gate checks

• ✅ reduction within tolerance of graphify — built-in 6.79× ≥ 4.59× (graphify 6.11× − 25%)
• ✅ reduction ≥ absolute floor — built-in 6.79× ≥ floor 4.00×
• ✅ faithfulness delta within tolerance of graphify — built-in +0.198 ≥ -0.092 (graphify +0.008 − 0.10)
• ✅ faithfulness delta ≥ absolute floor — built-in +0.198 ≥ floor +0.000
• ✅ fact recall within tolerance of graphify — built-in 0.772 ≥ 0.482 (graphify 0.582 − 0.10)

Tolerances: reduction within 25% (floor 4.0×), faithfulness within 0.10 (floor +0.00). Override via NEURALMIND_PARITY_* env vars.

Automated by evals/parity/run.py — reproduce locally with python -m evals.parity.run.

Multi-language structural parity

Language	graphify symbols	built-in covers	dangling
typescript	54	54 (100%)	0
go	45	45 (100%)	0
rust	49	49 (100%)	0
java	52	52 (100%)	0
c	47	47 (100%)	0
cpp	51	51 (100%)	0
csharp	52	52 (100%)	0
ruby	46	46 (100%)	0
php	54	54 (100%)	0

• ✅ typescript: symbol coverage ≥ floor — 54/54 graphify symbols (100%) ≥ 90%
• ✅ typescript: no dangling edges — 0 dangling edge(s)
• ✅ go: symbol coverage ≥ floor — 45/45 graphify symbols (100%) ≥ 90%
• ✅ go: no dangling edges — 0 dangling edge(s)
• ✅ rust: symbol coverage ≥ floor — 49/49 graphify symbols (100%) ≥ 90%
• ✅ rust: no dangling edges — 0 dangling edge(s)
• ✅ java: symbol coverage ≥ floor — 52/52 graphify symbols (100%) ≥ 90%
• ✅ java: no dangling edges — 0 dangling edge(s)
• ✅ c: symbol coverage ≥ floor — 47/47 graphify symbols (100%) ≥ 90%
• ✅ c: no dangling edges — 0 dangling edge(s)
• ✅ cpp: symbol coverage ≥ floor — 51/51 graphify symbols (100%) ≥ 90%
• ✅ cpp: no dangling edges — 0 dangling edge(s)
• ✅ csharp: symbol coverage ≥ floor — 52/52 graphify symbols (100%) ≥ 90%
• ✅ csharp: no dangling edges — 0 dangling edge(s)
• ✅ ruby: symbol coverage ≥ floor — 46/46 graphify symbols (100%) ≥ 90%
• ✅ ruby: no dangling edges — 0 dangling edge(s)
• ✅ php: symbol coverage ≥ floor — 54/54 graphify symbols (100%) ≥ 90%
• ✅ php: no dangling edges — 0 dangling edge(s)

Coverage floor: 90% of graphify's per-language symbols (no gold-fact set exists for TS/Go, so parity is structural).

Optional SCIP precision pass

• ✅ precision: SCIP corrects the heuristic call edge — run() → A.handle under SCIP (heuristic wrongly linked B.handle)
• ✅ precision: strict no-op when disabled — graph unchanged when NEURALMIND_PRECISION is unset

Off by default (NEURALMIND_PRECISION); proven on tests/fixtures/scip_precision to replace a heuristic call edge with the compiler-accurate one a SCIP index resolves.

[github-actions]

NeuralMind self-benchmark

Status: PASS — floor 4×, measured 6.1×.

Phase 1 — Reduction on committed fixture

• Average reduction: 6.1×
• Top-k retrieval hit rate: 74.6%
• Naive baseline: 89,984 tokens (all fixture files concatenated)
• NeuralMind total: 14,768 tokens across 19 queries
• Estimated monthly savings @ 100 queries/day on Claude 3.5 Sonnet: ~$35.63

#	Query	Shape	Naive	NeuralMind	Ratio	Hit
1	auth-flow	cross-file	4,736	773	6.1×	33.3%
2	api-endpoints	focused	4,736	758	6.2×	100.0%
3	billing-flow	cross-file	4,736	779	6.1×	33.3%
4	user-storage	cross-file	4,736	651	7.3×	50.0%
5	jwt-verify	focused	4,736	669	7.1×	100.0%
6	stripe-webhook	focused	4,736	801	5.9×	100.0%
7	create-user	cross-file	4,736	743	6.4×	50.0%
8	refund	focused	4,736	760	6.2×	100.0%
9	db-choice	identity	4,736	852	5.6×	100.0%
10	invoice-send	cross-file	4,736	890	5.3×	50.0%
11	debug-login-silent	focused	4,736	761	6.2×	100.0%
12	debug-webhook-reject	focused	4,736	815	5.8×	100.0%
13	debug-invoice-missing	cross-file	4,736	747	6.3×	50.0%
14	debug-token-expire	focused	4,736	891	5.3×	100.0%
15	refactor-add-user-field	cross-file	4,736	799	5.9×	50.0%
16	refactor-swap-database	focused	4,736	779	6.1×	100.0%
17	refactor-add-mfa	cross-file	4,736	817	5.8×	100.0%
18	next-after-jwt-change	cross-file	4,736	689	6.9×	50.0%
19	next-after-charge-change	cross-file	4,736	794	6.0×	50.0%

Phase 2 — Synapse recall A/B (same warm graph, recall off vs on)

• Synapse edges after seeding co-editing sessions: 2793
• Top-k hit rate: 71.9% off → 80.7% on (Δ +8.8 points)
• Reduction ratio: 6.2× off → 6.1× on (Δ -0.07× — budget-neutral by design)

The Hebbian synapse layer is now the single learning measurement (the old
learned_patterns reranker was removed). The hit-rate delta shows associative recall
surfacing co-edited modules a purely textual search ranks lower; the near-zero reduction
delta confirms it does so without spending extra tokens (recalled nodes displace the
weakest hits, not add to them).

Assumptions

• Baseline: every .py file in tests/fixtures/sample_project/ concatenated.
• Tokenizer: tiktoken GPT-4o encoding (per-model breakdown in multi_model.json if generated).
• Pricing: Claude 3.5 Sonnet input @ $3.0/MTok.
• Regression floor: 4× — well below NeuralMind's typical 40–70× on real repos.

Per-model token reduction

Model	Tokenizer	Naive	NeuralMind	Ratio	Source
GPT-4o / GPT-4o-mini	tiktoken o200k_base	4,739	779	6.1×	measured
GPT-4 / GPT-3.5-turbo	tiktoken cl100k_base	4,710	770	6.1×	measured
Claude 3.5 Sonnet	estimated: GPT-4o × 1.08 — install anthropic for an exact count	5,118	841	6.1×	estimated
Llama 3 (70B)	estimated: GPT-4o × 1.22 — Llama tokenizer requires model weights; estimate based on published vocab ratios	5,781	950	6.1×	estimated

Rows marked measured use the provider's real tokenizer. Rows marked
estimated apply a published vocab-size correction to the GPT-4o count —
honest approximations, not hardcoded claims.

NeuralMind retrieval-quality eval

Suite	Queries	MRR	Answerability	Recall@5	Precision@5	Gate
go	19	0.939	100%	0.860	0.607	PASS
python	19	0.974	100%	0.781	0.585	PASS
typescript	19	0.947	100%	0.807	0.585	PASS

Query category coverage (PRD 2):

• go: architecture: 10, bug-localization: 4, refactor: 3, next-edit: 2
• python: architecture: 10, bug-localization: 4, refactor: 3, next-edit: 2
• typescript: architecture: 10, bug-localization: 4, refactor: 3, next-edit: 2

go vs baseline:

• mrr: 0.939 (▼ -0.011)
• answerability: 1.000 (= +0.000)
• recall@1: 0.614 (▼ -0.003)
• recall@3: 0.860 (▲ +0.026)
• recall@5: 0.860 (▲ +0.026)

python vs baseline:

• mrr: 0.974 (▲ +0.074)
• answerability: 1.000 (= +0.000)
• recall@1: 0.667 (▲ +0.150)
• recall@3: 0.781 (▼ -0.053)
• recall@5: 0.781 (▼ -0.053)

typescript vs baseline:

• mrr: 0.947 (▲ +0.047)
• answerability: 1.000 (= +0.000)
• recall@1: 0.614 (▲ +0.031)
• recall@3: 0.807 (▲ +0.007)
• recall@5: 0.807 (▲ +0.007)

Overall: PASS

---

Automated by .github/workflows/ci-benchmark.yml — regenerate locally with python -m tests.benchmark.run and neuralmind benchmark --quality.

[dfrostar]

Closing: stale dependabot PR, superseded by newer versions.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.