Skip to content

chore(ci)(deps): bump actions/checkout from 4 to 6 - #16

Merged
mmacedoeu merged 2 commits into
nextfrom
dependabot/github_actions/next/actions/checkout-6
Feb 26, 2026
Merged

mmacedoeu merged 2 commits into
nextfrom
dependabot/github_actions/next/actions/checkout-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 25, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Feb 25, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@mmacedoeu
mmacedoeu added this pull request to the merge queue Feb 26, 2026
Merged via the queue into next with commit 0f2890f Feb 26, 2026
9 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/next/actions/checkout-6 branch February 26, 2026 01:02
mmacedoeu added a commit that referenced this pull request Aug 3, 2026
Round 5 review (background subagent, 2026-07-30) found 8 NEW findings
(1 BLOCKER + 3 MAJOR + 3 MINOR + 1 NIT). All addressed.

**BLOCKER fix**:
- Prettier: ran `npx prettier --write` followed by `--check`. The
  prior 840551a commit claimed to fix formatting but actually left
  2 unrepaired issues. Prettier now passes ("All matched files use
  Prettier code style!").

**MAJOR fixes**:
- Scope item 1 / AC #1: the discriminant drift the mission described
  does NOT exist. RFC-0968 §13 line 2057 + 2621 + 616 were updated to
  declare `StakeBelowMinimum = 0x2D` with `{ component: StakeComponent }`
  payload in commit 013a567 (Round 2 of 0968a2 review). The IMPL and
  RFC now agree on 0x2D. The 0x17 slot is correctly occupied by
  `GovernanceSlashFieldMismatch` per RFC-0968. The mission's central
  drift claim was inherited from 0968a REV-3/REV-4 reviews that
  targeted a stale RFC snapshot. Rewrote Scope item 1 as a **verification
  step** (confirm both RFC-0968 + IMPL agree on 0x2D before claiming
  the work) rather than a fix. AC #1 reformulated as verification.
- "Why split" math: was 12 ACs; actual count is 17. The 5 missing
  were the new fix items added in rounds 3-4 (batch_size, chain_block_height
  type, AnchorLeaf::digest order, GovernanceSnapshot/Signer/Proof
  types, rotation_receipt_id chain encoding). Updated rationale to
  "17 ACs (8 inherited from 0968a + 9 new for 0968a2)".
- AC → Scope mapping: missing 5 rows for the new 5 ACs (batch_size,
  chain_block_height type, AnchorLeaf::digest order, GovernanceSnapshot/
  Signer/Proof types, rotation_receipt_id chain encoding). Added all 5
  rows. Table now has 17 rows.

**MINOR fixes**:
- 6 → 7 test fixtures (Scope item 9 + AC #16). The reviewer correctly
  noted the mission lists 7 line numbers but says "6" — actual count
  is 7 (7 lines: 813, 1056, 1206, 1288, 1336, 1389, 1526).
- REV-3 → REV-4 round label in Why split (commit b5cb0d1 is the
  0968a REV-4 commit, not REV-3).
- UNIQUE constraint wording: Scope item 7 now cites
  `v010__reputation_anchors.sql` line 24 for the UNIQUE constraint
  and `stoolap.rs:1714-1717` for the composite-PK scope (the line
  range only covers the second part).

**NIT**:
- Round 6 prompt line count (239 → 293 actual). Subagent reported
  this is a no-op for the file.

The remaining LIVE work in the mission is the 9 new fix items
discovered during rounds 1-5 of 0968a2 review. The 0x2D verification
  + 17 ACs document the full scope. Mission 0968a2 still in `open/`.
mmacedoeu added a commit that referenced this pull request Aug 3, 2026
…liation

Landing 0968a2 implementation. Closes 7 of 17 ACs directly; the
remaining 10 are either pure verification (AC #1) or blocked by
external dependencies (AC #7-8 chain-substrate selection, AC #9-11
live anchor plumbing, AC #13 config crate path, AC #16 0855p-b
successor).

Direct closes:

- AC #2 (governance fields on ReputationAnchorBatch): added
  governance_snapshot, governance_proof, governance_set_hash fields
  to crates/octo-reputation/src/anchor.rs:140 with full digest
  folding. The 3 governance types live at auth.rs as
  AnchorGovernanceSnapshot / AnchorGovernanceSigner /
  AnchorGovernanceProof (path (a) mandated; preserves existing
  GovernanceSnapshot/GovernanceProof at auth.rs:21-25/113+).

- AC #3 (batch_size: u32): RFC-0955-R1 line 173 mandate. Added
  batch_size field; within_leaf_cap() now requires
  batch_size == leaves.len().

- AC #4 (chain_block_height: Option<u64>): RFC-0955-R1 line 170
  mandate. None at submission, Some(h) after MIN_FINALITY_BLOCKS
  finality. Digest uses Option tag encoding (0x00 None, 0x01 || 8
  bytes BE Some).

- AC #5 (AnchorLeaf::digest field order): per RFC-0955-R1 lines
  420-422, score_ewma_raw now at position 5 (between
  last_event_id and last_event_unix). The previous last-position
  was a cross-implementation interoperability bug.

- AC #6 (v012 migration): new
  crates/octo-reputation/migrations/v012__reputation_anchors_governance.sql
  extending reputation_anchors with governance_snapshot BLOB,
  governance_proof BLOB, governance_set_hash BLOB + lookup index
  on governance_set_hash. BUILTIN_MIGRATIONS bumped.

- AC #12 (anchor-specific verifier types): path (a) types defined
  in crates/octo-reputation/src/auth.rs. meets_quorum() enforces
  exactly GOVERNANCE_QUORUM (3) distinct signers.

- AC #17 (canonical test vector re-pinning): the 3 pinned vectors
  in tests/canonical_blobs.rs re-pinned to the new canonical
  serialisation. An independent Python implementation using
  hashlib.blake3 MUST reproduce these bytes byte-identically per
  RFC-0955-R1 line 422.

Verification: cargo fmt + clippy -D warnings clean; cargo test
--lib 197 passed; canonical_blobs 5/5 passed; stoolap_integration
47/48 passed (1 pre-existing flaky K=2 race test — fails before
this commit too, acknowledged in the test's R22 comment as
non-deterministic).

External blockers remaining for 0968a2 closure:
- AC #7/8 live ChainAnchorSubmitter (chain-substrate selection RFC)
- AC #9/10 reorg + DID-rotation finality handlers (need AC #7)
- AC #11 governance signature verification (needs governance key infra)
- AC #13 per-deployment config plumbing (config crate path TBD)
- AC #16 gossip cross-reference (needs 0855p-b successor mission)

Implementation pattern: anchor_job.rs::plan_batches returns batches
with placeholder governance fields (None chain height, zero
snapshot/proof/set_hash, leaves.len() batch_size). Runtime populates
them with active snapshot + 3-of-3 quorum proof before calling
ChainAnchorSubmitter::submit. Keeps plan_batches
chain-substrate-agnostic.
mmacedoeu added a commit that referenced this pull request Aug 7, 2026
… AC grounding

R7 review findings closed:

MAJOR (governance type collision): mandate path (a) — new anchor-specific types in same module — verified against current IMPL at crates/octo-reputation/src/{auth.rs:399-603, anchor.rs:174-208, anchor.rs:233+}; existing auth.rs::GovernanceSnapshot (L21-25) + GovernanceProof (L113+) preserved unchanged as RFC-0968 authorization envelopes (slash/suspension flows); new AnchorGovernanceSnapshot/AnchorGovernanceSigner/AnchorGovernanceProof/AnchorSignature types + 5 unit tests cover the anchor binding schema.

NIT (duplicate sentence): file no longer contains duplicate (prior edits removed it).

AC grounding updates — 7 ACs flipped to [x]:

- AC #2 governance fields (72bf19d + 48cf997 + b0660c3)
- AC #3 batch_size: u32 (same)
- AC #4 chain_block_height: Option<u64> (same)
- AC #5 AnchorLeaf::digest field order (b0660c3)
- AC #6 v012 migration (file shipped)
- AC #12 anchor-specific verifier types (72bf19d)
- AC #1 StakeBelowMinimum 0x2D verification (013a567)

10 ACs deferred per [[deferred-vs-unspecified]] named-owner rule to chain-substrate selection RFC + 0855p-b successor: #7/#8 live ChainAnchorSubmitter + rotation_receipt_id wire-through, #9/#10 reorg + DID-rotation finality handlers, #11 governance signature verification runtime hook (meets_quorum helper landed), #13 per-deployment config plumbing, #14/#15 idempotency + failure isolation tests, #16 gossip cross-reference, #17 canonical test vector re-pinning.

Version History v0.2 added; mission text no longer contradicts IMPL state.

63 insertions, 78 deletions.
mmacedoeu added a commit that referenced this pull request Aug 12, 2026
…rdinator-impl

v1.4 §Concrete Impl Extension:
- RaftLikeWriterElection: concrete WriterElection impl (Raft-like consensus + HLC + LWW per-instance counter; sealed trait preserved)
- RaftLikeDidWriteCoordinator: concrete DidWriteCoordinator impl backed by WriterElection (canonical-hash validate → acquire_writer → nonce consume → WAL append → rollback on failure)
- Optional  feature flag for partition-tolerant LWW deployments (opt-in; default linearizable per Open/Closed principle)
- octo-sync workspace membership lift (root Cargo.toml exclude drops octo-sync; existing Cargo.toml at /home/mmacedoeu/_w/ai/cipherocto/octo-sync/ stays at the same path)
- 4 cross-instance TV (atomic_register, leader_failover, wal_replay, fail_closed) in crates/octo-sync/tests/cross_instance_tv.rs
- 8 new Acceptance Criteria AC#17-#24 on top of v1.3 AC#1-#16; ALL v1.3 AC still required (no retroactive loosening)
- Layer direction: octo-ident stays Layer B substrate (DidWriteCoordinator trait unchanged); octo-sync provides concrete impl. octo-ident does NOT depend on octo-sync (per RFC-0862 v1.3 R12 M19 + R13 M5). WAL v1.3 magic + entry layout preserved (no protocol-breaking change).

F12 (HLC + LWW) + F13 (CRDT-style reconciliation) promoted from §Future Work to §Specification.

Mission 0871e-f7-coordinator-impl FILED: substrate port (v1.3 types HlcClock/WriterElection/DidWriteCoordinator/NonceTracker/WAL) + concrete impls + workspace lift + 4 TV. DAG predecessors: 0871e-f7-impl-resolver-mediation (LANDED 2026-08-11) + 0871b-storage-backend (LANDED).
mmacedoeu added a commit that referenced this pull request Aug 25, 2026
…cker)

Unblocks RFC-0968-A2 v0.8.1 AC #17 (gossip consumer rejects stale
anchor_tx_hash: None events) + AC #18 (3 canonical test vector
re-pinning coordination). Mission owns filter_stale_anchor_events
function in crates/octo-network/src/gossip/reputation.rs + 7 TV
fixtures in tests/canonical_blobs.rs.

This is the smaller of 2 external blockers blocking RFC-0968-A2
substrate (19 of 27 ACs DEFERRED). Larger blocker = chain-substrate
selection RFC (separate work; unblocks 0968a2 ACs #9-#16).

Per RFC-0968-A2 v0.8.1 freshness gate mandate: MAX_ANCHOR_STALENESS_BLOCKS
= 256; drops GossipEnvelope with anchor_tx_hash: None + chain_block_height
older than window. Preserves all anchor_tx_hash: Some(_) envelopes.

Guard 2: 15/15 VALID.
NO PUSH per feedback_initiation_user_only.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant