Skip to content

docs: drop stale #507 JSON execute gate and bump supported versions to 0.16.x - #649

Merged
sungjunlee merged 1 commit into
mainfrom
gardener/2026-10-12-skill-security
Oct 11, 2026
Merged

sungjunlee merged 1 commit into
mainfrom
gardener/2026-10-12-skill-security

Conversation

@sungjunlee

Copy link
Copy Markdown
Owner

요약

Gardener 보고서(grok-4.7)를 Claude Code Opus가 실제 코드와 대조해 확인한 문서 수정 2건입니다.

  1. skills/aibris/SKILL.md: "#507이 고쳐지기 전에는 --exclude+JSON execute를 하지 않는다" 블록 2개(구 124-129행, 244-249행)를 삭제하고, "preview와 execute에 같은 --exclude를 유지하고, 실행 전 plan/receipt의 exclusions를 확인한다(0.12.1부터, fix(clean): honor --exclude on clean --json and emit exclusions #513)" 한 줄로 교체.
  2. SECURITY.md: 지원 버전 표를 0.16.x | Yes, <=0.15.x | No로 갱신 (최신 릴리스 v0.16.0, 2026-10-10 KST).

#507 픽스가 main에 있다는 근거

따라서 #507 게이트는 이미 고쳐진 버그를 이유로 에이전트의 JSON execute를 막고 있었습니다. 보호 안내(같은 --exclude 유지 + exclusions 확인)는 그대로 남깁니다.

범위

문서(*.md)만 변경. git diff --name-only: SECURITY.md, skills/aibris/SKILL.md.

@coderabbitai

coderabbitai Bot commented Oct 11, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8c3eee9c-4b3e-4ceb-9e99-f498a3de420f

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b4baa5166b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skills/aibris/SKILL.md
Comment on lines +124 to +125
- preview와 execute에 같은 `--exclude`를 유지하고, 실행 전 plan/receipt의
`exclusions`를 확인한다(0.12.1부터, #513).

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep the v0.12.0 JSON-exclude guard

When the installed binary is v0.12.0, which Step 0 still explicitly accepts, this replacement removes the only guard against combining --exclude with JSON execution even though the note itself says the fix begins in v0.12.1. On v0.12.0 the JSON route ignores the exclusion and omits its diagnostics, so an excluded live owner can remain eligible and be deleted; either raise the minimum version to v0.12.1 or retain the non-JSON/skip-execution fallback for v0.12.0.

AGENTS.md reference: AGENTS.md:L31-L32

Useful? React with 👍 / 👎.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-11T22:50:12.313121Z b4baa51 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@sungjunlee
sungjunlee merged commit f06e954 into main Oct 11, 2026
6 checks passed
@sungjunlee
sungjunlee deleted the gardener/2026-10-12-skill-security branch October 11, 2026 23:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant