Google Git Google Git
Sign in
apache/magpie/HEAD
  1. 338e8e9 chore: bump dev version to 0.9.0.dev202610280340 (#1889) by github-actions[bot] · 25 hours ago main
  2. 7e19441 setup evals: ground verify step-2 in the skill's rules; split checkout-behind from snapshot drift in update (#1888) by Jarek Potiuk · 26 hours ago
  3. e0c5b70 perf(setup-isolated-setup-update): move conditional checks and the routing into sibling files (#1885) by Jarek Potiuk · 26 hours ago
  4. e523bf4 perf(setup-isolated-setup-install): move Steps V and R and the routing into sibling files (#1884) by Jarek Potiuk · 26 hours ago
  5. 8a9c00f perf(setup-isolated-setup-verify): move conditional and failure-only text into sibling files (#1883) by Jarek Potiuk · 26 hours ago
  6. f549bbe fix(container-gateway): cover nested worktrees at any depth, and Aider's .env (#1882) by Jarek Potiuk · 28 hours ago
  7. 595b8d1 fix(agent-guard): read wrapper options and expanded heads the way bash does (#1878) by Jarek Potiuk · 28 hours ago
  8. a9a52d2 skill-evals(setup-isolated-setup-verify): bring two fixtures up to the checks (#1881) by Jarek Potiuk · 28 hours ago
  9. e61fa39 setup: drop the stale counts from the verify and doctor section headings (#1880) by Jarek Potiuk · 28 hours ago
  10. b1a13b0 fix(container-gateway): keep every harness's workspace config out of writable binds (#1879) by Jarek Potiuk · 28 hours ago
  11. d4226a3 Sync specs with contributed functionality (#1877) by Jarek Potiuk · 29 hours ago
  12. e03b745 chore: bump npm pins in prek hooks (#1837) by github-actions[bot] · 29 hours ago
  13. 9a729b8 feat(hook-manager): register managers that need no install fix (#1825) (#1838) by Vardhman Gupta · 30 hours ago
  14. 0413a7f test(security): use claude-code/testing tool noun in public-surface-scrub tests (#1855) (#1856) by Vardhman Gupta · 30 hours ago
  15. 5095d45 security-cve-allocate: one CVE-allocated draft per reporter, each on its own thread (#1876) by Jarek Potiuk · 30 hours ago
  16. 5bb1ea3 setup: trust a VCS directory as the personal layer only when it is unambiguous and ours (#1875) by Jarek Potiuk · 30 hours ago
  17. a5b4d82 fix(security-issue-deduplicate): keep the CVE both trackers share (#1857) by Davide Polato · 31 hours ago
  18. eec00bf agent-guard: check the command a literal name and leading redirections leave (#1874) by Jarek Potiuk · 31 hours ago
  19. 4fc005f agent-guard: split a command line into commands the way bash does (#1873) by Jarek Potiuk · 31 hours ago
  20. 6c6ea8b agent-guard: keep a command whole when any line is continued (#1869) by Jarek Potiuk · 31 hours ago
  21. 5395957 setup: import the pre-flight checker from a per-user directory, never from the project (#1870) by Jarek Potiuk · 31 hours ago
  22. fc668d5 skill-evals(security-issue-sync): follow the dashboard steps as they now read (#1872) by Jarek Potiuk · 32 hours ago
  23. 4803194 adversarial-review: keep agy from handing the review to a subagent (#1871) by Jarek Potiuk · 32 hours ago
  24. 9548297 agent-guard: fail closed on untokenisable lines that can spell git or gh (#1865) by Jarek Potiuk · 32 hours ago
  25. 56f55d1 skill-evals(setup): bring seven drifted steps in line with the skill (#1868) by Jarek Potiuk · 32 hours ago
  26. 282f075 agent-guard: strip heredoc bodies only where bash treats them as data (#1867) by Jarek Potiuk · 32 hours ago
  27. 4fc0032 setup: import the pre-flight checker only from outside the working tree (#1866) by Jarek Potiuk · 33 hours ago
  28. b5dce81 agent-guard: a continued heredoc line is not stripped (#1864) by Jarek Potiuk · 33 hours ago
  29. f822ee4 Security workflow: stricter relay detection and advisory URL checks (#1863) by Jarek Potiuk · 33 hours ago
  30. 735aad3 Tighten adapter defaults: TLS, collaborator rollups, HTTPS-only bridge (#1862) by Jarek Potiuk · 33 hours ago
  31. a8ced5e container-gateway: refuse writable binds over agent and git config (#1861) by Jarek Potiuk · 34 hours ago
  32. 5dd9a15 agent-guard: see through more wrappers; read MAGPIE_GUARD_OFF from the hook env (#1860) by Jarek Potiuk · 35 hours ago
  33. 300df22 security: one reply, one thread -- never combine replies across threads (#1858) by Jarek Potiuk · 35 hours ago
  34. fb0ea2a Restructure the threat model project-wide and add SECURITY.md (#1859) by Jarek Potiuk · 35 hours ago
  35. e669eb1 fix(code-review): give inline comments the finding's text, not just its rule (#1853) by Jarek Potiuk · 2 days ago
  36. faf3248 fix(adversarial-review): say why an Antigravity review came back empty (#1852) by Jarek Potiuk · 2 days ago
  37. be1a5d7 fix(adversarial-review): keep the end of a reviewer's raw output and its stderr (#1854) by Jarek Potiuk · 2 days ago
  38. a9fa208 feat(harness): Goose plugin hook and whole-process sandbox (#1851) by Jarek Potiuk · 2 days ago
  39. d968624 chore(deps): bump @anthropic-ai/sandbox-runtime (#1848) by dependabot[bot] · 2 days ago
  40. cc19241 chore(deps): bump the github-actions group with 3 updates (#1849) by dependabot[bot] · 2 days ago
  41. c5c1684 chore(deps): bump the python-deps group across 1 directory with 3 updates (#1850) by dependabot[bot] · 2 days ago
  42. 0d098c3 feat(harness): support Pi; fix OpenCode install docs (#1847) by Jarek Potiuk · 2 days ago
  43. a951715 chore: bump dev version to 0.9.0.dev202610270025 (#1846) by github-actions[bot] · 2 days ago
  44. d380ad5 feat(harness): support Antigravity, remove Gemini CLI (#1845) by Jarek Potiuk · 2 days ago
  45. fc8919e feat(tools/discourse): list category topics by latest activity (#1841) by MakerFly · 2 days ago
  46. 450c797 fix(agent-isolation): hint on container-gateway policy refusals (#1810) by Shahar Epstein · 2 days ago
  47. d6f68f4 chore(deps): bump certifi from 2026.7.22 to 2026.10.18 (#1844) by dependabot[bot] · 2 days ago
  48. 4b0279d chore: bump dev version to 0.9.0.dev202610262031 (#1843) by github-actions[bot] · 2 days ago
  49. 74017f4 feat(security): add deterministic public-surface scrub Claude Code mod (part of #1497) (#1676) by Vardhman Gupta · 2 days ago
  50. 067b527 fix(container-gateway): refuse driver options on volume create (#1842) by Jarek Potiuk · 2 days ago
  51. 34e3e0b fix(setup): make isolated-setup-verify checks catch false passes (#1808) by Shahar Epstein · 2 days ago
  52. 27597d5 docs(security): Vulnogram review comments cannot be resolved (#1840) by Jarek Potiuk · 3 days ago
  53. b9e1400 fix(agent-isolation): guard Linux allowAllUnixSockets with denyRead (#1809) by Shahar Epstein · 3 days ago
  54. 0ba1af2 fix(agent-isolation): show the touch overlay for every signature (#1832) by Jarek Potiuk · 3 days ago
  55. a7c18e9 fix(setup): load the upgrade hook in Codex (#1836) by Jarek Potiuk · 3 days ago
  56. dff7cc3 fix(agent-isolation): arm the touch overlay for every git that reaches the key (#1833) by Jarek Potiuk · 3 days ago
  57. c5ceeea docs(spec-loop): sync specs with #1829 (#1835) by Jarek Potiuk · 3 days ago
  58. cb51b53 fix: correct drift found by the spec sync; setup welcome, Subversion layer, Codex hook (#1829) by Jarek Potiuk · 3 days ago
  59. 9634e3e test(agent-isolation): keep the shim test's commit from signing (#1831) by Jarek Potiuk · 3 days ago
  60. a13e07d docs(spec-loop): sync specs with contributed functionality (#1830) by Jarek Potiuk · 3 days ago
  61. 95b0e91 feat(security): fetch and decrypt report attachments through PonyMail (#1828) by Jarek Potiuk · 3 days ago
  62. 853c678 chore: bump dev version to 0.9.0.dev202610251812 (#1827) by github-actions[bot] · 3 days ago
  63. 469f85a chore: bump npm pins in prek hooks (#1748) by github-actions[bot] · 3 days ago
  64. 58d5093 docs(setup): keep the old checker until the new copy works (#1747) by Eldho Thomas · 3 days ago
  65. 5fd8201 fix(container-gateway-hook): wait for a serving backend; review follow-ups (#1826) by Jarek Potiuk · 3 days ago
  66. d774c41 feat(agent-isolation): hook-manager contract, with prek as its first adapter (#1819) by Jarek Potiuk · 4 days ago
  67. 2257a02 fix(container-gateway-hook): start the gateway on demand before a container command (#1814) by Jarek Potiuk · 4 days ago
  68. d487157 fix(cve-tool-vulnogram): link the CVE record page and fill source.discovery (#1818) by Jarek Potiuk · 4 days ago
  69. bba8230 fix(setup): complete-upgrade write-scope probe and shallow clones (#1817) by Jarek Potiuk · 4 days ago
  70. 963afb2 fix(setup): stop doctor probe 3 reporting a live gateway as not running (#1815) by Jarek Potiuk · 4 days ago
  71. ba58b3d fix(ci): fail tests-ok when workspace discovery fails (#1807) by MakerFly · 4 days ago
  72. ef81248 fix(setup): complete-upgrade review follow-ups (#1816) by Jarek Potiuk · 4 days ago
  73. 89ebc17 feat(setup): complete-upgrade — check and fix everything after a Magpie update (#1813) by Jarek Potiuk · 4 days ago
  74. b457dff fix(agent-isolation): clean up the temp file when the settings write is denied (#1812) by Jarek Potiuk · 4 days ago
  75. dcfe0ad chore: bump dev version to 0.9.0.dev202610250024 (#1805) by Jarek Potiuk · 4 days ago
  76. d600695 fix(container-gateway-hook): derive the checkout root without repository config (#1804) by Jarek Potiuk · 4 days ago
  77. c7c4e3d fix(asf-security-dash): refuse non-ASF projects (#1798) by Jarek Potiuk · 4 days ago
  78. d871258 docs(setup): register the container-gateway hook per machine (#1797) by Jarek Potiuk · 4 days ago
  79. 2215f6b fix: mark and gate the remaining ASF-only surfaces (#1796) by Jarek Potiuk · 4 days ago
  80. 66c11c8 fix(setup): hold doctor probe 3 and 5 outputs in memory and add tests (#1776) by Vardhman Gupta · 4 days ago
  81. 6e277bf fix(security): confine MCP credential paths; publish only announced records (#1795) by Jarek Potiuk · 4 days ago
  82. 95d27bd fix(setup): session-start hook runs a fixed bash and only a root-owned Python (#1794) by Jarek Potiuk · 4 days ago
  83. d260085 fix(sandbox): give sandboxed prek its own home (#1792) by Jarek Potiuk · 4 days ago
  84. db11005 fix(container-gateway-hook): no here-string; anchor worktree main checkouts (#1790) by Jarek Potiuk · 4 days ago
  85. 67ee53c fix(container-gateway-hook): run in bash privileged mode; fail closed without a home (#1793) by Jarek Potiuk · 4 days ago
  86. e4aa7a6 fix(setup): session-start hook runs a trusted, isolated interpreter (#1791) by Jarek Potiuk · 4 days ago
  87. 89a8a96 fix(container-gateway-hook): count the real cwd and home as writable, whatever the environment says (#1789) by Jarek Potiuk · 4 days ago
  88. c1a5a0a feat(security): run every security skill without project adoption (#1787) by Jarek Potiuk · 4 days ago
  89. d00a1e6 fix(setup): drop the stale ~/.local/share/uv sandbox grant at session start (#1788) by Jarek Potiuk · 4 days ago
  90. 374d85b feat(security): import email-delivered scans; add submit-to-oss-scan (#1786) by Jarek Potiuk · 4 days ago
  91. c29ca22 fix(container-gateway-hook): never run sandbox-writable code outside the sandbox (#1784) by Jarek Potiuk · 4 days ago
  92. d467f84 fix(sandbox): keep uv state the host executes out of sandbox reach (#1785) by Jarek Potiuk · 4 days ago
  93. 3dc96c0 docs(tools/ponymail): offer to save the ASF password in a kept login profile (#1782) by Jarek Potiuk · 4 days ago
  94. f5ff398 docs(repo-health): add workflow-optimization checks for skipped gates, cache misses and apt installs (#1783) by Jarek Potiuk · 4 days ago
  95. d7e0306 feat(security): reconcile the tracker with the ASF Security dashboard (#1780) by Jarek Potiuk · 5 days ago
  96. 60b0867 docs(setup): describe self-adoption links as they are wired (#1781) by Jarek Potiuk · 5 days ago
  97. 4452fde fix: ASF-wide CNA org id, never used for allocation; personal config in Subversion projects (#1779) by Jarek Potiuk · 5 days ago
  98. deb3566 chore: bump dev version to 0.9.0.dev202610241151 (#1778) by github-actions[bot] · 5 days ago
  99. 46d5667 fix(egress-gateway): start proxy with explicit arguments (#1774) by MakerFly · 5 days ago
  100. 66fa640 feat(tools/discourse): add a read-only Discourse topic bridge (#1755) by MakerFly · 5 days ago