Promote Dev_new_gui → main (2026-07-16 wave 2/3: auth fixes, test-suite repairs, owner decisions) by mrveiss · Pull Request #11807 · mrveiss/AutoBot-AI

mrveiss · 2026-07-16T21:18:29Z

Thinking Path

Owner-approved second promotion (2026-07-16): clears the 86 superseded security alerts on main (new advisories against main's day-old dependency set — fixes already merged to Dev_new_gui in this week's grouped bumps) and activates the @pinia/testing + oxlint dependabot caps.

What Changed

Everything since promotion #11767: 13+ PRs incl. HIGH device-JWT auth repair + own-device-scoped list (#11736/#11792), RBAC stale-permissions fix (#11794), ssh-key degrade helper (#11793), zero-downtime-deploy dead methods (#11779), test-suite repairs (#11737/#11754/#11791 — services 313/0, orchestration 713/0, sweep 1220 collected/0 errors), api.ts regen (#11783), dependabot caps (#11786), and this week's dependency-group bumps.

Verification

All constituent PRs individually CI-green on required checks with issue-closure evidence (commit SHAs on every closed issue).
Ancestry restored via -s ours back-merge PR merge(main): absorb previous promotion merge commit — unblock promotion #11806 (zero content delta).
Post-merge: @dependabot recreate on the capped frontend groups.

Model Used

Claude Fable 5

…1777) (#11778) #11723 added _probe_app_health to autobot-slm-agent/ (repo-root, non-deployed) tree, leaving the probe inert in production — the Ansible slm_agent role deploys from autobot-slm-backend/slm/agent/ (canonical, drift-checked #1629). Port the probe + discover_all_services wiring into the canonical module and mirror to the Ansible files copy so it actually reaches the running agent and completes the #11718 engine_degraded pipeline end-to-end.

…+ phantom modules (#11761) (#11780)

Bumps the all-dependencies group in /autobot-slm-frontend with 2 updates: [vue-router](https://github.com/vuejs/router) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `vue-router` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/vuejs/router/releases) - [Commits](vuejs/router@v5.1.0...v5.2.0) Updates `typescript-eslint` from 8.63.0 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: vue-router dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: typescript-eslint dependency-version: 8.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runs (#11782) (#11784) deploy_role.yml requires role_name and derives deploy_role from it; the endpoint passed only deploy_role, tripping the role_name-undefined guard so every role Migrate/Redeploy failed validation — including the #11719 Redeploy button and the only builtin path to deploy a single managed role (tts-worker).

* chore(deps): bump the all-dependencies group with 2 updates Bumps the all-dependencies group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release). Updates `actions/setup-node` from 6 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v6...v7) Updates `softprops/action-gh-release` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@718ea10...3d0d988) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> * chore(types): regenerate api.ts from backend OpenAPI schema Auto-regenerated (py3.14) to match the backend schema so the required verify-generated-types gate passes. Triggered by auto-fix-generated-types.yml. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

…11783) (#11785)

…er-pin lockstep (#11786) (#11787)

…5 updates (#11776) Updates the requirements on [boto3](https://github.com/boto/boto3), [langgraph-checkpoint-redis](https://github.com/redis-developer/langgraph-redis), [vllm](https://github.com/vllm-project/vllm), [transformers](https://github.com/huggingface/transformers) and [langsmith](https://github.com/langchain-ai/langsmith-sdk) to permit the latest version. Updates `boto3` to 1.43.49 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.46...1.43.49) Updates `langgraph-checkpoint-redis` to 0.5.1 - [Release notes](https://github.com/redis-developer/langgraph-redis/releases) - [Commits](redis-developer/langgraph-redis@v0.5.0...0.5.1) Updates `vllm` to 0.25.1 - [Release notes](https://github.com/vllm-project/vllm/releases) - [Changelog](https://github.com/vllm-project/vllm/blob/main/RELEASE.md) - [Commits](vllm-project/vllm@v0.25.0...v0.25.1) Updates `transformers` from 5.13.1 to 5.14.0 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v5.13.1...v5.14.0) Updates `langsmith` from 0.10.2 to 0.10.5 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.10.2...v0.10.5) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.48 dependency-type: direct:production dependency-group: all-dependencies - dependency-name: langgraph-checkpoint-redis dependency-version: 0.5.1 dependency-type: direct:production dependency-group: all-dependencies - dependency-name: langsmith dependency-version: 0.10.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: transformers dependency-version: 5.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: vllm dependency-version: 0.25.1 dependency-type: direct:production dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Updates the requirements on [transformers](https://github.com/huggingface/transformers) to permit the latest version. Updates `transformers` to 5.14.0 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v5.13.1...v5.14.0) --- updated-dependencies: - dependency-name: transformers dependency-version: 5.14.0 dependency-type: direct:production dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…3 updates (#11769) Updates the requirements on [websockets](https://github.com/python-websockets/websockets), [boto3](https://github.com/boto/boto3) and [langgraph-checkpoint-redis](https://github.com/redis-developer/langgraph-redis) to permit the latest version. Updates `websockets` to 15.0.1 - [Release notes](https://github.com/python-websockets/websockets/releases) - [Commits](python-websockets/websockets@15.0...15.0.1) Updates `boto3` to 1.43.49 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.46...1.43.49) Updates `langgraph-checkpoint-redis` to 0.5.1 - [Release notes](https://github.com/redis-developer/langgraph-redis/releases) - [Commits](redis-developer/langgraph-redis@v0.5.0...0.5.1) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.48 dependency-type: direct:production dependency-group: all-dependencies - dependency-name: langgraph-checkpoint-redis dependency-version: 0.5.1 dependency-type: direct:production dependency-group: all-dependencies - dependency-name: websockets dependency-version: 15.0.1 dependency-type: direct:production dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ory state bleed (#11754) (#11788)

…loy (#11779) (#11789)

…ire to device endpoints (#11736) (#11790) * fix(auth): repair require_device_jwt rot — await, canonical scopes, wire to device endpoints (#11736) * chore(types): regenerate api.ts from backend OpenAPI schema Auto-regenerated (py3.14) to match the backend schema so the required verify-generated-types gate passes. Triggered by auto-fix-generated-types.yml. --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

…osed by #11478 (#11737) (#11795) * fix(test): real-load sqlalchemy/models for code_version_test — 21 mock-chain failures (#11737) * fix(test): force real deploy_artifacts under drift_checker load — 5 TypeError failures (#11737) * fix(test): repoint sso security patches to get_async_redis_client, await _build_oauth_client (#11737) * fix(test): repair 33 pre-existing tests/services runtime failures exposed by #11478 (#11737) * Auto-fix: code formatting Applied Black, isort, and autoflake to match code-quality checks. Triggered by workflow auto-fix-formatting.yml. --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

…real seams, canonical fold-in (#11791) (#11797)

… collects clean (#11794) (#11799)

…d/write asymmetry (#11792) (#11801) * feat(auth): device-JWT own-device-scoped GET /api/devices — close read/write asymmetry (#11792) * Auto-fix: code formatting Applied Black, isort, and autoflake to match code-quality checks. Triggered by workflow auto-fix-formatting.yml. --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

…eadable key, warn once (#11793) (#11804)

…block next promotion

merge(main): absorb previous promotion merge commit — unblock promotion

github-actions · 2026-07-16T21:18:55Z

✅ SSOT Configuration Compliance: Passing

🎉 No hardcoded values detected that have SSOT config equivalents!

github-actions · 2026-07-16T21:19:05Z

AutoBot Phase Validation Results

System Maturity: 96.5%

Phase Status:

PASS Phase 1: Core Infrastructure: 100.0%
PASS Phase 2: Knowledge Base and Memory: 100.0%
IN PROGRESS Phase 3: LLM Integration: 66.7%
PASS Phase 4: Security and Authentication: 100.0%
PASS Phase 5: Agent Orchestration: 100.0%
PASS Phase 6: Enhanced UI/UX: 100.0%
PASS Phase 7: Testing and Validation: 100.0%
PASS Phase 8: Advanced Features: 100.0%
PASS Phase 9: Multi-Modal AI: 100.0%
PASS Phase 10: Production Readiness: 100.0%

Recommendations:

🟡 MEDIUM: Phase 3: LLM Integration requires attention (66.7% complete): Review and implement
✅ System is production-ready - consider advanced features and scaling: Review and implement

codecov · 2026-07-17T20:49:57Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

mrveiss and others added 22 commits July 15, 2026 22:14

fix(infra): repair import-dead shared/scripts CLIs — missing imports …

ffc2469

…+ phantom modules (#11761) (#11780)

fix(types): regenerate api.ts — ChatSecretScope rename from #11759 (#…

65e9378

…11783) (#11785)

fix(ci): hard-exclude oxlint >=1.74 from dependabot group — plugin pe…

46b592d

…er-pin lockstep (#11786) (#11787)

fix(test): repair orchestration checkpoint-resumer rot + workflow_mem…

659781f

…ory state bleed (#11754) (#11788)

fix(infra): implement missing blue-green methods in zero_downtime_dep…

14a380a

…loy (#11779) (#11789)

fix(test): repair device-jwt integration + websocket auth test rot — …

afd7579

…real seams, canonical fold-in (#11791) (#11797)

fix(test): stop cross-directory sys.modules leaks — slm-backend sweep…

41024f4

… collects clean (#11794) (#11799)

fix(slm): _ssh_key_usable helper — degrade to default identity on unr…

6c51fa8

…eadable key, warn once (#11793) (#11804)

merge(main): absorb previous promotion merge commit with -s ours — un…

e2cb791

…block next promotion

Merge pull request #11806 from mrveiss/hotfix-backmerge-main2

b28e711

merge(main): absorb previous promotion merge commit — unblock promotion

mrveiss merged commit 230255f into main Jul 16, 2026
35 of 39 checks passed

Navigation Menu

Repository navigation

Promote Dev_new_gui → main (2026-07-16 wave 2/3: auth fixes, test-suite repairs, owner decisions) - #11807

Promote Dev_new_gui → main (2026-07-16 wave 2/3: auth fixes, test-suite repairs, owner decisions)#11807
mrveiss merged 22 commits into
mainfrom
Dev_new_gui

mrveiss commented Jul 16, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

codecov Bot commented Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

mrveiss commented Jul 16, 2026

Thinking Path

What Changed

Verification

Model Used

Uh oh!

Uh oh!

github-actions Bot commented Jul 16, 2026

✅ SSOT Configuration Compliance: Passing

Uh oh!

github-actions Bot commented Jul 16, 2026

AutoBot Phase Validation Results

Phase Status:

Recommendations:

Uh oh!

codecov Bot commented Jul 17, 2026

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant