Skip to content

[pull] trunk from cli:trunk - #14

Open
pull[bot] wants to merge 712 commits into
Moshbbab:trunkfrom
cli:trunk
Open

[pull] trunk from cli:trunk#14
pull[bot] wants to merge 712 commits into
Moshbbab:trunkfrom
cli:trunk

Conversation

@pull

@pull pull Bot commented Jun 1, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot locked and limited conversation to collaborators Jun 1, 2026
@pull pull Bot added ⤵️ pull merge-conflict Resolve conflicts manually labels Jun 1, 2026
dependabot Bot and others added 27 commits July 3, 2026 15:16
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.1 to 1.82.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.1...v1.82.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…g.org/grpc-1.82.0

chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0
…lauspost/compress-1.19.0

chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.0
Bumps [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) from 2.0.7 to 2.0.8.
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.7...v2.0.8)

---
updated-dependencies:
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.2 to 4.36.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@8aad20d...54f647b)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.38.0 to 0.39.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.38.0...v0.39.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.46.0 to 0.47.0.
- [Commits](golang/sys@v0.46.0...v0.47.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Replace the inline decision tree with the shared skills-driven approach
used in desktop/desktop. The workflow now fetches triage instructions from
desktop/gh-cli-and-desktop-shared-workflows at runtime, uses a GitHub App
token for auth, and always suggests labels at medium confidence or lower
so all suggestions require maintainer approval.

Key changes:
- Add repos toolset and allowed-repos for cross-repo skill loading
- Add min-integrity: none for reading untrusted issue content
- Add github-app safe-output with CLI_TRIAGE_APP secret refs
- Replace inline decision tree with 5-step skills-driven flow
- Keep duplicate label (cli/cli has one, unlike desktop)

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Draft: issue-intents agentic issue triage (starting point for discussion)
Add copilot-requests: write permission so the workflow uses the built-in
GitHub Actions token for LLM calls, removing the need for a separate
COPILOT_GITHUB_TOKEN secret.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Use Actions token for Copilot inference in issue-triage workflow
Bumps [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) from 0.81.6 to 0.82.2.
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@ba6380c...3fac1cf)

---
updated-dependencies:
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.82.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…ubbletea/v2-2.0.8

chore(deps): bump charm.land/bubbletea/v2 from 2.0.7 to 2.0.8
Bumps [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v2.1.0...v2.1.1)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
All three codeql-action sub-actions (init, analyze, upload-sarif) must
be the same version to avoid version mismatch errors. This commit
brings init and upload-sarif in line with the analyze bump.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
…/text-0.39.0

chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0
…/sys-0.47.0

chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.21.0 to 0.22.0.
- [Commits](golang/sync@v0.21.0...v0.22.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…odeql-action/analyze-4.36.3

chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3
…h-aw-actions/setup-0.82.2

chore(deps): bump github/gh-aw-actions/setup from 0.81.6 to 0.82.2
…ubbles/v2-2.1.1

chore(deps): bump charm.land/bubbles/v2 from 2.1.0 to 2.1.1
…/sync-0.22.0

chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0
Bumps [actions/cache/restore](https://github.com/actions/cache) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@27d5ce7...55cc834)

---
updated-dependencies:
- dependency-name: actions/cache/restore
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) from 0.82.2 to 0.82.3.
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@3fac1cf...eb6dc28)

---
updated-dependencies:
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.82.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
babakks and others added 30 commits August 10, 2026 15:18
Add aw-actions group to dependabot configuration
Bumps the aw-actions group with 2 updates: [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) and [github/gh-aw-actions/setup-cli](https://github.com/github/gh-aw-actions).


Updates `github/gh-aw-actions/setup` from 0.83.4 to 0.86.1
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@v0.83.4...8914f47)

Updates `github/gh-aw-actions/setup-cli` from 0.85.4 to 0.86.1
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@2709137...8914f47)

---
updated-dependencies:
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.86.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aw-actions
- dependency-name: github/gh-aw-actions/setup-cli
  dependency-version: 0.86.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aw-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
…ns-0509bfe7a3

chore(deps): bump the aw-actions group with 2 updates
Matches the convention already used by internal/prompter, pkg/cmd/run/shared,
and pkg/cmd/workflow/shared for their test helper files.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Config from GIT_CONFIG_COUNT and GIT_CONFIG_PARAMETERS is command line scope,
which outranks both the global and system files, so pointing GIT_CONFIG_GLOBAL
at an empty file was not enough on its own. An inherited safe.bareRepository=explicit
made git refuse to open the bare fixtures at all.

Replaces the copy of this helper in each of the two packages that needed it.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
go-gh reads GH_TOKEN and friends ahead of any stored config, so isolating the
config file left tests authenticated for anyone with a token exported. Nine
packages failed as a result.

The token test set its own env vars before building the config, which the
clearing would undo, so it now sets them after.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
The helper only ever produced an empty config, so tests needing populated hosts
had to reach for the mock instead and lost the env isolation that comes with it.

Test_mightBeGHESUser was one of those. Its cases named "no env vars" never
cleared any, so they failed whenever GH_ENTERPRISE_TOKEN or GH_HOST was set.
Its table now holds config strings rather than prebuilt configs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Neither mock constructor had a doc comment, so nothing signalled which of the
three to reach for. Each now says what it does and points at the other.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
NewBlankConfig and NewFromString gave no hint that what came back was a mock,
which made them the default choice even where the real config was wanted. Every
other mock constructor in the repo already announces itself, as in NewMockPrompter
and NewMockFinder.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Isolate tests from local machine's auth and git configuration
Clarified usage of cleanup comments for API features
Co-authored-by: babakks <36728931+babakks@users.noreply.github.com>
Add --search-type flag for semantic and hybrid issue search
Bumps google.golang.org/protobuf from 1.36.11 to 1.36.12.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…com-only-features

Don't ask for feature detection cleanup comments when not needed
…g.org/protobuf-1.36.12

chore(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12
Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.8 to 0.21.9.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.8...v0.21.9)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 650cd136-f9e3-4bdb-a226-7c88328b8443
…oogle/go-containerregistry-0.21.9

chore(deps): bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.19.1 to 1.19.2.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.19.1...v1.19.2)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…lauspost/compress-1.19.2

chore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2
Bumps the aw-actions group with 2 updates: [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) and [github/gh-aw-actions/setup-cli](https://github.com/github/gh-aw-actions).


Updates `github/gh-aw-actions/setup` from 0.85.4 to 0.86.2
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@2709137...6aab9e5)

Updates `github/gh-aw-actions/setup-cli` from 0.85.4 to 0.86.2
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@v0.85.4...6aab9e5)

---
updated-dependencies:
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.86.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aw-actions
- dependency-name: github/gh-aw-actions/setup-cli
  dependency-version: 0.86.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aw-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
…ns-2e17f3d8bd

chore(deps): bump the aw-actions group with 2 updates
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

⤵️ pull merge-conflict Resolve conflicts manually

Projects

None yet

Development

Successfully merging this pull request may close these issues.