Commits

Commit history

1. Commits on Sep 30, 2026

   • fix(deps): cap mcp below 2.0 so cgr mcp-server starts on fresh installs (#2519)

     vitali87

     committed
     33bcc99View commit details

     Copy full SHA for 33bcc99

     View code at this pointBrowse repository at this point
2. Commits on Sep 28, 2026

   • chore(lint): enable Ruff's flake8-bandit (S) security rules

     claude

     committed
     046d3c5View commit details

     Copy full SHA for 046d3c5

     View code at this pointBrowse repository at this point
3. Commits on Sep 27, 2026

   • build(docs): build the site with Zensical and write the Credits page before the build

     claude

     committed
     0d1d6eeView commit details

     Copy full SHA for 0d1d6ee

     View code at this pointBrowse repository at this point

   • Merge pull request #2225 from vitali87/feat/2175-credits-page

     Show description for c0515df
     vitali87

     authored
     c0515dfView commit details

     Copy full SHA for c0515df

     View code at this pointBrowse repository at this point

   • Merge pull request #2155 from vitali87/fix/2131-required-check-app-binding

     Show description for 0ceec1f
     vitali87

     authored
     0ceec1fView commit details

     Copy full SHA for 0ceec1f

     View code at this pointBrowse repository at this point

   • fix(docs): escape Markdown link syntax in Credits page metadata

     claude

     committed
     299139aView commit details

     Copy full SHA for 299139a

     View code at this pointBrowse repository at this point

   • Merge remote-tracking branch 'origin/main' into feat/2175-credits-page

     claude

     committed
     9d16c0fView commit details

     Copy full SHA for 9d16c0f

     View code at this pointBrowse repository at this point

   • fix(docs): escape third-party metadata and link only web URLs on the Credits page

     claude

     committed
     84957bcView commit details

     Copy full SHA for 84957bc

     View code at this pointBrowse repository at this point

   • fix(ci): read every page of a bound check's runs and pick the latest by creation time

     claude

     committed
     9df827bView commit details

     Copy full SHA for 9df827b

     View code at this pointBrowse repository at this point

   • Merge remote-tracking branch 'origin/main' into fix/2131-required-check-app-binding

     claude

     committed
     aa17295View commit details

     Copy full SHA for aa17295

     View code at this pointBrowse repository at this point

   • fix(ci): judge a bound required context's commit status by its state, not a conclusion it lacks

     claude

     committed
     ee28362View commit details

     Copy full SHA for ee28362

     View code at this pointBrowse repository at this point
4. Commits on Sep 26, 2026

   • fix(notices): credit the PyInstaller bootloader and CPython's incorporated software

     Show description for c7a542c
     claude

     committed
     c7a542cView commit details

     Copy full SHA for c7a542c

     View code at this pointBrowse repository at this point
5. Commits on Sep 25, 2026

   • fix: credit OpenSSL 3 only and ship the GPLv3 with the GCC runtime notice

     Show description for d3b621f
     claude

     committed
     d3b621fView commit details

     Copy full SHA for d3b621f

     View code at this pointBrowse repository at this point

   • fix: refuse notices when the binary's native libraries cannot be read

     Show description for 03193e6
     claude

     committed
     03193e6View commit details

     Copy full SHA for 03193e6

     View code at this pointBrowse repository at this point

   • fix: keep GPL readline out of the binary and credit bundled native libraries

     Show description for a7a9991
     claude

     committed
     a7a9991View commit details

     Copy full SHA for a7a9991

     View code at this pointBrowse repository at this point

   • feat(docs): a Credits page for third-party components, linked from cgr --version (#2175)

     Show description for 65cec44
     vitali87

     committed
     65cec44View commit details

     Copy full SHA for 65cec44

     View code at this pointBrowse repository at this point

   • fix(gate): judge App-bound check runs only through their App

     Show description for 71cae87
     vitali87

     committed
     71cae87View commit details

     Copy full SHA for 71cae87

     View code at this pointBrowse repository at this point
6. Commits on Sep 24, 2026

   • Merge remote-tracking branch 'origin/main' into fix/2131-required-check-app-binding

     vitali87

     committed
     d731824View commit details

     Copy full SHA for d731824

     View code at this pointBrowse repository at this point

   • Merge pull request #1939 from vitali87/fix/1936-stale-review-anchor

     Show description for f5ed7fa
     vitali87

     authored
     f5ed7faView commit details

     Copy full SHA for f5ed7fa

     View code at this pointBrowse repository at this point
7. Commits on Sep 22, 2026

   • fix(ci): judge an App-bound required check by that App's run only (#2131)

     Show description for 2073dda
     vitali87

     committed
     2073ddaView commit details

     Copy full SHA for 2073dda

     View code at this pointBrowse repository at this point

   • Merge pull request #1969 from vitali87/fix/1929-unconsumed-sections-are-errors

     Show description for 9ca0208
     vitali87

     authored
     9ca0208View commit details

     Copy full SHA for 9ca0208

     View code at this pointBrowse repository at this point

   • Merge pull request #1968 from vitali87/fix/1957-gate-reads-classic-protection

     Show description for a0915ce
     vitali87

     authored
     a0915ceView commit details

     Copy full SHA for a0915ce

     View code at this pointBrowse repository at this point

   • fix: read CodeRabbit's range anchor and an uppercase commit URL

     Show description for 5b6b969
     vitali87

     committed
     5b6b969View commit details

     Copy full SHA for 5b6b969

     View code at this pointBrowse repository at this point
8. Commits on Sep 21, 2026

   • fix(scripts): one gh seam, and fail loudly when a test escapes it

     Show description for 372a19f
     vitali87

     committed
     372a19fView commit details

     Copy full SHA for 372a19f

     View code at this pointBrowse repository at this point

   • fix: find the PYZ by typecode rather than by filename

     vitali87

     committed
     0b46080View commit details

     Copy full SHA for 0b46080

     View code at this pointBrowse repository at this point

   • fix: keep one bundle_contents module object and test our own call

     vitali87

     committed
     33b9c78View commit details

     Copy full SHA for 33b9c78

     View code at this pointBrowse repository at this point

   • fix: read the PYZ sub-archive and match dotted distributions

     vitali87

     committed
     01deda5View commit details

     Copy full SHA for 01deda5

     View code at this pointBrowse repository at this point

   • fix: derive notice licences from the bundle, not the installed wheel

     vitali87

     committed
     7367dbbView commit details

     Copy full SHA for 7367dbb

     View code at this pointBrowse repository at this point

   • fix: guard the dist-info licence read against decode failures too

     Show description for 11de1df
     vitali87

     committed
     11de1dfView commit details

     Copy full SHA for 11de1df

     View code at this pointBrowse repository at this point

   • fix: refuse when a resolved licence file cannot be read

     Show description for e356140
     vitali87

     committed
     e356140View commit details

     Copy full SHA for e356140

     View code at this pointBrowse repository at this point

   • fix: read licences wheels ship as package data, not dist-info metadata

     Show description for 385f71e
     vitali87

     committed
     385f71eView commit details

     Copy full SHA for 385f71e

     View code at this pointBrowse repository at this point
9. Commits on Sep 20, 2026

   • fix: retain undeclared dependency notices

     vitali87

     committed
     c2ac625View commit details

     Copy full SHA for c2ac625

     View code at this pointBrowse repository at this point

   • fix: reproduce SPDX licence text for wheels that ship none, refuse incomplete notices

     vitali87

     committed
     43f7b97View commit details

     Copy full SHA for 43f7b97

     View code at this pointBrowse repository at this point

   • feat: ship third-party licence notices beside each release binary

     vitali87

     committed
     6854587View commit details

     Copy full SHA for 6854587

     View code at this pointBrowse repository at this point

   • Merge remote-tracking branch 'origin/main' into fix/1936-stale-review-anchor

     Show description for b60d5f9
     vitali87

     committed
     b60d5f9View commit details

     Copy full SHA for b60d5f9

     View code at this pointBrowse repository at this point