Fix/dependabot pytest pygments - #6
Merged
Merged
Conversation
Skills added: migrate, openapi, refactor, onboard, dependency, incident.
- src/vstack/_templates/skills/{migrate,openapi,refactor,onboard,dependency,incident}/
- .github/skills/{migrate,openapi,refactor,onboard,dependency,incident}/SKILL.md
- agent templates updated: engineer, designer, tester, product
- .github/agents/{engineer,designer,tester,product}.agent.md regenerated
- .github/vstack.json updated (26 skills)
- docs/design/skills.md updated with full skill table
- README.md updated: structure diagram, roles table
- .github/copilot-instructions.md updated: structure + install table
- CHANGELOG.md: added 1.0.2, 1.0.3, and [Unreleased] 1.0.4 entries
- tests/conftest.py + src/vstack/cli/constants.py: EXPECTED_CANONICAL_NAMES updated to 26 skills
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates dependency tooling to address security advisories and expands vstack’s skill/agent template set by adding six new skills (with regenerated .github/ artifacts) and aligning docs and constants to the expanded skill catalog.
Changes:
- Bumped dev dependencies (notably
pytestandpygments) and refreshed the Poetry lockfile and pre-commit hook revisions. - Added new skill templates/configs for
migrate,openapi,refactor,onboard,dependency, andincident, plus generated.github/skills/*outputs and updated agent templates to reference the new skills. - Updated skill canonical-name lists, docs index tables, README structure/role tables, Copilot instructions, and CHANGELOG entries to reflect the expanded skill set.
Reviewed changes
Copilot reviewed 34 out of 35 changed files in this pull request and generated 6 comments.
Show a summary per file
| File | Description |
|---|---|
| tests/conftest.py | Extends the test canonical skill-name list to include the 6 new skills. |
| src/vstack/cli/constants.py | Extends CLI canonical skill-name list used for validation/verify flows. |
| src/vstack/_templates/skills/refactor/template.md | Adds new refactor skill template (source of truth). |
| src/vstack/_templates/skills/refactor/config.yaml | Adds refactor skill metadata/config. |
| src/vstack/_templates/skills/openapi/template.md | Adds new openapi skill template (source of truth). |
| src/vstack/_templates/skills/openapi/config.yaml | Adds openapi skill metadata/config. |
| src/vstack/_templates/skills/onboard/template.md | Adds new onboard skill template (source of truth). |
| src/vstack/_templates/skills/onboard/config.yaml | Adds onboard skill metadata/config. |
| src/vstack/_templates/skills/migrate/template.md | Adds new migrate skill template (source of truth). |
| src/vstack/_templates/skills/migrate/config.yaml | Adds migrate skill metadata/config. |
| src/vstack/_templates/skills/incident/template.md | Adds new incident skill template (source of truth). |
| src/vstack/_templates/skills/incident/config.yaml | Adds incident skill metadata/config. |
| src/vstack/_templates/skills/dependency/template.md | Adds new dependency skill template (source of truth). |
| src/vstack/_templates/skills/dependency/config.yaml | Adds dependency skill metadata/config. |
| src/vstack/_templates/agents/tester/template.md | Updates tester agent template to reference new skills. |
| src/vstack/_templates/agents/product/template.md | Updates product agent template to reference onboard. |
| src/vstack/_templates/agents/engineer/template.md | Updates engineer agent template to reference new skills. |
| src/vstack/_templates/agents/designer/template.md | Updates designer agent template to reference openapi. |
| poetry.lock | Updates locked dependency graph consistent with the dependency bumps. |
| docs/design/skills.md | Extends skills index table to include the 6 new skills. |
| README.md | Updates role→primary skills table and template-source-of-truth documentation/structure diagram. |
| CHANGELOG.md | Records the new skills and related documentation/template changes under Unreleased. |
| .pre-commit-config.yaml | Updates pre-commit hook revisions (ruff, mdformat, markdownlint, etc.). |
| .github/vstack.json | Updates install manifest with new artifacts and install timestamp/version. |
| .github/skills/refactor/SKILL.md | Adds generated refactor skill output. |
| .github/skills/openapi/SKILL.md | Adds generated openapi skill output. |
| .github/skills/onboard/SKILL.md | Adds generated onboard skill output. |
| .github/skills/migrate/SKILL.md | Adds generated migrate skill output. |
| .github/skills/incident/SKILL.md | Adds generated incident skill output. |
| .github/skills/dependency/SKILL.md | Adds generated dependency skill output. |
| .github/copilot-instructions.md | Updates Copilot instructions to reflect additional artifact types and install rules. |
| .github/agents/tester.agent.md | Regenerated tester agent with new skill references. |
| .github/agents/product.agent.md | Regenerated product agent with new skill references. |
| .github/agents/engineer.agent.md | Regenerated engineer agent with new skill references. |
| .github/agents/designer.agent.md | Regenerated designer agent with new skill references. |
…kticks instead of 3
…avoid nested fence mismatch
- refactor: use <base> instead of hardcoded origin/main in git diff
- dependency: remove unused {{BASE_BRANCH}} partial
- migrate: add git diff <base> to show changed migration files in branch
- openapi: add operationId and summary checks to Part 2
- incident: add runbook action item to Step 5 response category
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This PR finalizes the Dependabot security bump and bundles the full follow-up hardening work around newly added skills/templates.
What changed:
migrate,openapi,refactor,onboard,dependency,incident||/&&) in manifest checks.... | head ... || fallbackbehavior by using explicit tool checks and structured conditionals.Why:
Related Issues
Validation
Local validation run:
pytestpassed: 187 passed, 100% coverageRelease Impact
feat:(minor)fix:(patch)BREAKING CHANGE(major)