Repository navigation
chore: bump version to 0.0.2 for stable release - #52
Conversation
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 16 minutes and 35 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (2)
📝 WalkthroughWalkthroughThe Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 2 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (2 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Detects semver prerelease versions (e.g. 0.0.2-beta.1) and publishes them with --tag beta instead of latest, so `npm install -g failproofai` always installs the latest stable release. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…the SDK lock, sprintf-js in two fixtures (#904) Three of the 12 open Dependabot alerts have a fix that keeps every pin: - sdk/python/uv.lock: mcp 1.28.1 -> 1.30.0 (GHSA-84m7-p3x7-pcfv, alert #60), the finding that has had the Supply Chain gate red on main since today's scheduled scan. crewai 1.15.27 (and 1.15.28) pin `mcp~=1.28.1`, so the fix is a `[tool.uv] override-dependencies` entry. uv reads it only when resolving uv.lock; the built package's metadata does not change. The lock moves mcp and nothing else and stays at revision 5 (written with uv 0.13.1; an older uv rewrites it to revision 3). - nextjs and mastra-1 fixtures: sprintf-js 1.0.3 removed (GHSA-hp3w-g68c-fv3c, alerts #50 and #52). No sprintf-js release fixes it. The only path is @mastra/core -> gray-matter -> js-yaml@3.15.2 -> argparse@1.0.10, and js-yaml 3 requires argparse from bin/js-yaml.js alone. A fixture-local `"argparse": "2.0.1"` override (no dependencies) drops it; each lockfile changes by those two entries only. Verified locally: OSV-Scanner with the gate's image and args reports no issues; npm audit on both fixtures reports 0; the mastra integration suites (mastra-0, mastra-1) and the nextjs shard pass; the Python adapter suite with every extra passes, as does the SDK suite on 3.10 and 3.14. The other nine alerts have no fix that keeps the fixtures: chromadb x4 and nltk (no patched release exists; ignored in osv-scanner.toml until 2026-11-20), and ai plus @ai-sdk/provider-utils in ai-4 and mastra-0 (accepted in SECURITY.md). Claude-Session: https://claude.ai/code/session_01L4vWL1D7r7hvSEG2KgDgcB Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Summary
0.0.2-beta.2to0.0.2for the first stable release.Test plan
npm publishpicks up the correct version🤖 Generated with Claude Code
Summary by CodeRabbit