Michael Ramos e53a933106 fix(ci): bump Bun build pin to 1.3.14 for sandbox env loading (#1249) (#1250) ...

Bun <= 1.3.11 loads an empty process.env when a cwd ancestor directory
is unreadable, the normal state inside OS sandboxes (Seatbelt/Landlock):
every released binary silently ignored all PLANNOTATOR_* env vars there
(oven-sh/bun#27802, fixed in 1.3.13). The 1.3.11 pin existed for the
Bun 1.3.12 cross-compile signing regression (#541, binaries SIGKILLed
on macOS); verified gone on 1.3.14: cross-compiled darwin-arm64 output
carries the same linker-signed CodeDirectory as the known-good shipped
binaries and executes cleanly on macOS 26.3, and the unreadable-ancestor
env repro passes on a 1.3.14 build.

Guardrails so neither regression class can ship silently again: the
release smoke matrix gains a macOS arm64 leg (executing the binary is
the signing assertion), and a new smoke step runs the annotate server
from a cwd with an unreadable ancestor, where responding on the fixed
PLANNOTATOR_PORT proves env vars were read.

2026-08-09 21:06:26 -07:00

..

assets

docs: correct privacy and network claims (#1163)

2026-07-31 11:22:19 -07:00

ISSUE_TEMPLATE

feat(github): minimal bug-report issue form (#1100)

2026-07-20 19:02:24 -07:00

plugin

chore: bump version to 0.17.0

2026-04-06 12:36:15 -07:00

workflows

fix(ci): bump Bun build pin to 1.3.14 for sandbox env loading (#1249) (#1250)

2026-08-09 21:06:26 -07:00

renovate.json

chore: bump version to 0.19.0

2026-04-21 19:36:02 -07:00