gh-glance 0.11.0 → 0.11.2

package/CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.11.2] - 2026-08-31
+
+### Fixed
+
+- **Unchanged Security checks no longer turn a known count red.** A conditional
+  alert-source response with no staged ETag write now contributes an empty
+  cache update instead of failing with `part.stagedEntities is not iterable`.
+
+## [0.11.1] - 2026-08-31
+
+### Fixed
+
+- **Lagging GitHub rate-limit counters no longer leave REST-backed tabs paused.**
+  A same-window observer refresh now keeps the governor fresh while retaining
+  the more conservative used and remaining values.
+- **Dead request owners no longer delay every shared budget probe.** Their
+  uncertain API cost remains reserved, but later probes do not wait 30 seconds
+  for requests that can no longer complete.
+
 ## [0.11.0] - 2026-08-30
 
 ### Fixed
@@ -776,7 +795,9 @@ engineering, security, QA and UX. What follows is what changed as a result.
 - The `main` field from `package.json`. It advertised the file as importable,
   but importing it took over the terminal or exited the host process.
 
-[Unreleased]: https://github.com/juan294/gh-glance/compare/v0.11.0...HEAD
+[Unreleased]: https://github.com/juan294/gh-glance/compare/v0.11.2...HEAD
+[0.11.2]: https://github.com/juan294/gh-glance/compare/v0.11.1...v0.11.2
+[0.11.1]: https://github.com/juan294/gh-glance/compare/v0.11.0...v0.11.1
 [0.11.0]: https://github.com/juan294/gh-glance/compare/v0.10.0...v0.11.0
 [0.10.0]: https://github.com/juan294/gh-glance/compare/v0.9.1...v0.10.0
 [0.9.1]: https://github.com/juan294/gh-glance/compare/v0.9.0...v0.9.1

package/index.mjs

@@ -2659,7 +2659,10 @@ function claimProbe(scope, leaseId, nowMs) {
     const resources = RATE_RESOURCES.filter((resource) => dueAt[resource] <= at);
     const nonce = randomUUID();
     const startedReservationIds = Object.entries(state.reservations)
-      .filter(([, reservation]) => reservation.status === "started")
+      // An expired owner can no longer settle its request. Keep that uncertain
+      // cost charged, but do not make every later probe wait for it to finish.
+      .filter(([, reservation]) => reservation.status === "started" &&
+        state.leases[reservation.leaseId]?.expiresAt > at)
       .map(([id]) => id);
     state.probeClaim = {
       ownerLeaseId: leaseId,
@@ -2707,7 +2710,7 @@ function budgetFromObservation(raw, previous, nowMs, {
   clearProvenBlock = false,
   allowEpochChange = false,
 } = {}) {
-  const normalized = normalizeBudgetResource({ ...raw, observedAt: receivedAt });
+  let normalized = normalizeBudgetResource({ ...raw, observedAt: receivedAt });
   if (
     !normalized || normalized.resetMs <= nowMs || receivedAt > nowMs ||
     !RATE_RESOURCES.includes(resource) ||
@@ -2723,8 +2726,17 @@ function budgetFromObservation(raw, previous, nowMs, {
   }
   if (previous) {
     if (normalized.resetMs < previous.resetMs) return { status: "ignored" };
-    if (normalized.resetMs === previous.resetMs && normalized.used < previous.used) {
-      return { status: "ignored" };
+    if (budgetEpoch(previous) === epoch && normalized.used < previous.used) {
+      if (!allowEpochChange) return { status: "ignored" };
+      // The claimed observer can lag a newer endpoint response within the
+      // same GitHub window. Refresh its timestamp without giving that stale
+      // counter any capacity: retain the higher used and lower remaining
+      // values until the observer catches up.
+      normalized = {
+        ...normalized,
+        used: previous.used,
+        remaining: Math.min(normalized.remaining, previous.remaining),
+      };
     }
     if (
       normalized.resetMs === previous.resetMs && normalized.used === previous.used &&
@@ -3503,7 +3515,10 @@ async function fetchAlertSource(source, signal, now, {
       completedCalls,
       verdict: "ok",
       allNotModified: batch.allNotModified,
-      stagedEntities: batch.stagedEntities,
+      // Every other fetchAlertSource path returns a Map. An all-304 batch has
+      // no staged writes, so conditionalBatchResult returns null; normalize it
+      // here before fetchSecurity merges the independently fetched sources.
+      stagedEntities: batch.stagedEntities ?? new Map(),
       observations,
       parse: () => {
         const rows = mergeAlertRows(groups);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gh-glance",
-  "version": "0.11.0",
+  "version": "0.11.2",
   "description": "A live-refreshing GitHub dashboard for your terminal: Actions, Issues, Pull Requests, and Security alerts in one narrow pane",
   "type": "module",
   "bin": {