Skip to content

Bump peter-evans/create-pull-request from 6 to 8#1

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/peter-evans/create-pull-request-8
Open

Bump peter-evans/create-pull-request from 6 to 8#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/peter-evans/create-pull-request-8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 5, 2026

Copy link
Copy Markdown
Contributor

Bumps peter-evans/create-pull-request from 6 to 8.

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.0.0

What's new in v8

What's Changed

New Contributors

Full Changelog: peter-evans/create-pull-request@v7.0.11...v8.0.0

Create Pull Request v7.0.11

What's Changed

Full Changelog: peter-evans/create-pull-request@v7.0.10...v7.0.11

Create Pull Request v7.0.10

⚙️ Fixes an issue where updating a pull request failed when targeting a forked repository with the same owner as its parent.

What's Changed

New Contributors

Full Changelog: peter-evans/create-pull-request@v7.0.9...v7.0.10

Create Pull Request v7.0.9

⚙️ Fixes an incompatibility with the recently released actions/checkout@v6.

What's Changed

New Contributors

... (truncated)

Commits
  • 5f6978f fix: retry post-creation API calls on 422 eventual consistency errors (#4356)
  • d32e88d build(deps-dev): bump the npm group with 3 updates (#4349)
  • 8170bcc build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#4344)
  • 0041819 build(deps): bump picomatch (#4339)
  • b993918 build(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#4334)
  • 36d7c84 build(deps-dev): bump undici from 6.23.0 to 6.24.0 (#4328)
  • a45d1fb build(deps): bump @​tootallnate/once and jest-environment-jsdom (#4323)
  • 3499eb6 build(deps): bump the github-actions group with 2 updates (#4316)
  • 3f3b473 build(deps): bump minimatch (#4311)
  • 6699836 build(deps-dev): bump the npm group with 2 updates (#4305)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6 to 8.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v6...v8)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 5, 2026
milos85vasic added a commit that referenced this pull request Jul 7, 2026
…dary (§12.10/§11.4.131)

HEAD c848a49 (remote==local). Records: pipeline fix + fleet security fixes (ssh-proxy/gateway/vault-IDOR/
notification-hardening) + real features (migrate+schema-per-service, xterm terminal, gateway real-proxy,
pki/auth/mfa defect fixes) + 2 real backends implemented (notification delivery, port-forward SSH). S12
gateway-routes last in flight. Next: submodule-wiring phase (container-bridge/helixtrack/ai — repos verified
exist) + operator-credential-blocked backends (billing/ai-cloud/push) + migrate rollout + coverage/final review.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
milos85vasic added a commit that referenced this pull request Jul 7, 2026
…tainerrt backend

Add require+replace for digital.vasic.containers => ../../submodules/containers
(fictitious module path, replace is mandatory). New internal/containerrt package
wraps pkg/runtime.ContainerRuntime and adds RunFromImage (the one capability the
upstream interface intentionally omits — creating a NEW container from an image),
mirroring the documented precedent in digital.vasic.containers/pkg/brokertest.
Detect() auto-detects the local runtime (Podman-first per module default,
CONTAINER_RUNTIME_PRIORITY env override) and confirms rootless Podman 5.7.1 is
found and available on this host. No handler wiring yet (next commit).

Classification: project-specific (helix_terminator bridge #1 of 3).
milos85vasic added a commit that referenced this pull request Jul 7, 2026
…abrication

§11.4.43/§11.4.115 RED-before-fix checkpoint. Extract BridgeStore interface
(handler.go) so repo access is fakeable without a live Postgres (pure,
behavior-preserving refactor — repository.Repository still satisfies it
structurally, no repository.go changes). Handler.New now also takes a
containerrt.Backend (nil-safe). Wire main.go to containerrt.Detect().

Add TestCreateBridge_DoesNotFabricateActiveStatus_WhenContainerNeverComesUp:
fake backend proves (via Status) the container never started, yet the
CURRENT (unfixed) CreateBridge still writes status "active" and returns 201.

Captured RED evidence (this commit, test FAILS):
  "201" is not greater than or equal to "500"
  response body contains "status":"active"
  repo.created is non-empty (a bridge WAS persisted for a container that
  never came up)

Next commit implements the real runtime.Status reconciliation and reruns
this exact test to GREEN.

Classification: project-specific (helix_terminator bridge #1 of 3).
milos85vasic added a commit that referenced this pull request Jul 7, 2026
…eleteBridge against real runtime.Status

GREEN — TestCreateBridge_DoesNotFabricateActiveStatus_WhenContainerNeverComesUp
now PASSes (was RED in the prior commit).

CreateBridge: bringUp() attaches to an existing container by req.ContainerID
(starts it if not running) or runs a brand-new one from req.Image via
containerrt.Backend.RunFromImage; persisted Status derives from the REAL
runtime.Status result (containerrt.StatusFromState) — "active" ONLY when the
runtime confirms StateRunning. A container that fails to come up returns 502,
no row persisted (no unconditional "active").

GetBridge/ListBridges: reconcile() re-checks h.backend.Status for every
returned bridge and rewrites Status in the response (+ best-effort
UpdateBridge persistence) so a stopped/removed container never still reads
"active".

DeleteBridge: Stop()+Remove() the backing container (WithForceRemove +
WithRemoveVolumes, idempotent against an already-gone container) before
deleting the row.

If the runtime is unavailable (backend nil or IsAvailable==false),
CreateBridge fails honestly with 503 rather than fabricating status.

Classification: project-specific (helix_terminator bridge #1 of 3).
milos85vasic added a commit that referenced this pull request Jul 7, 2026
…27) + fix ContainerID round-trip bug it caught

Add optional trailing cmd to containerrt.Backend.RunFromImage (backward-
compatible variadic) + optional model.CreateContainerBridgeRequest.Command:
needed because a real-host FACT (verified via direct `podman run -d
busybox:latest`, captured before writing any test per §11.4.6) shows bare
busybox exits almost immediately (sh reads EOF on closed stdin under -d) —
real application images normally have a long-running entrypoint of their
own, busybox specifically needs a command override to stay up for the test.

TestIntegration_ContainerBridge_RealPodman (build tag `integration`) drives
CreateBridge -> GetBridge -> DeleteBridge through the real HTTP handlers
wired to a REAL auto-detected Podman runtime (no fake ContainerRuntime in
this test, per §11.4.27): creates a real busybox container, cross-checks
the API's reported status against real `podman inspect`/`podman ps -a`
sink-side evidence (§11.4.13/§11.4.69), stops the container out-of-band and
confirms GetBridge's reconciliation demotes it off "active", then confirms
DeleteBridge really Stop+Removes it. Container is force-removed in
t.Cleanup on every exit path (§11.4.14) -- verified zero orphans left after
the run (podman ps -a).

This test caught a REAL bug on first run (not a fabricated demo): bringUp's
create-branch returned RunFromImage's runtime-assigned hash ID instead of
the client-given `name`, so a subsequent GetBridge/DeleteBridge using the
bridge's stored ContainerID would not resolve to a valid identifier
consistently with the attach-existing-container branch. Root-caused per
§11.4.102 and fixed at source: bringUp now always returns `name` (the
podman/docker container name == req.ContainerID or the generated
"bridge-<uuid>"), matching the attach branch and every subsequent
Status/Stop/Remove call. Re-ran the same integration test after the fix:
PASS.

Uses `t.Context()` (Go 1.24+, module targets go 1.25.0).

Evidence commands + output:
  GOWORK=off GOMAXPROCS=2 go test -tags=integration -p 2 -count=1 -v \
    -run TestIntegration_ContainerBridge_RealPodman ./internal/handler/...
  => PASS (13.27s)
  podman ps -a --filter name=cbs-integration --format '{{.Names}}' => empty (no orphans)

Classification: project-specific (helix_terminator bridge #1 of 3).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants