Skip to content

[pull] main from withastro:main#584

Merged
pull[bot] merged 3 commits into
code:mainfrom
withastro:main
Jun 8, 2026
Merged

[pull] main from withastro:main#584
pull[bot] merged 3 commits into
code:mainfrom
withastro:main

Conversation

@pull

@pull pull Bot commented Jun 8, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

matthewp and others added 3 commits June 8, 2026 11:18
* Upgrade flue from 0.3.10 to 0.7.0

* Upgrade flue to 0.8.0 and migrate to agent/workflow split

- Bump @flue/cli and @flue/runtime from 0.7.0 to 0.8.0
- Move issue-triage and fix-verification from agents/ to workflows/
- Convert all workflows to createAgent() + run() pattern per 0.8.0 API
- Update GitHub Actions to use workflow file paths instead of agent names
- Update knip entry patterns for new directory layout

* Security: scope GITHUB_TOKEN to read-only, move writes to orchestrator

- Scope GITHUB_TOKEN to read-only (contents: read) in issue-triage,
  fix-verification, and merge-fix workflow permissions
- Add gitPush()/gitDeleteBranch() helpers that run outside the sandbox
  using FREDKBOT_GITHUB_TOKEN via child_process.exec
- Replace session.shell('git push') with orchestrator gitPush() in
  issue-triage, merge-resolve, and merge-fix workflows
- Stop passing FREDKBOT_GITHUB_TOKEN into sandbox env in merge-resolve
  and merge-fix (now use read-only GITHUB_TOKEN_BASE)
- Split merge-fix/github.ts headers into readHeaders()/writeHeaders()
  so reads use the base token and only postPRComment uses privileged

* Fix flue 0.8.0 CLI flags and workflow discovery in CI workflows

* fix: resolve @tailwindcss/vite peer dep against Vite 7 in example
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Florian Lefebvre <contact@florian-lefebvre.dev>
Co-authored-by: Malloo <26630797+Pouf5@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Jun 8, 2026
@pull pull Bot added the ⤵️ pull label Jun 8, 2026
@pull pull Bot merged commit ca26d0e into code:main Jun 8, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants