ur-agent 1.49.0 → 1.50.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,55 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.50.1
|
|
4
|
+
|
|
5
|
+
- Fixed an always-true provider test that silently disabled a large part of the
|
|
6
|
+
command surface. `isUsing3PServices()` was derived from `getAPIProvider()`,
|
|
7
|
+
a request-shaping enum that never returns `'firstParty'`, so the comparison
|
|
8
|
+
held for every user. Consequences: `/login` and `/logout` were never
|
|
9
|
+
registered; every `availability`-gated command failed its check, so
|
|
10
|
+
`/install-github-app`, `/fast`, `/chrome`, `/desktop`, `/install-slack-app`,
|
|
11
|
+
`/remote-setup`, `/upgrade`, `/usage`, and `/voice` reported "Unknown skill";
|
|
12
|
+
`ur auth status` classified every user as `third_party` and always logged in;
|
|
13
|
+
`is1PApiCustomer()` always returned false, suppressing three tips. Third-party
|
|
14
|
+
status is now derived from the provider registry — vendor API keys and
|
|
15
|
+
external CLI logins are third-party, while local, self-hosted, and
|
|
16
|
+
subscription runtimes are not.
|
|
17
|
+
- Ungated `/install-github-app`. It provisions a workflow and a repository
|
|
18
|
+
secret rather than consuming inference, and the API key is entered in the
|
|
19
|
+
flow, so it is now available on every provider including local runtimes.
|
|
20
|
+
|
|
21
|
+
## 1.50.0
|
|
22
|
+
|
|
23
|
+
- Completed `/install-github-app` so `@ur <task>` works from GitHub. The
|
|
24
|
+
mention now triggers on issue comments, pull-request comments, inline review
|
|
25
|
+
comments, submitted reviews, and new issues; `/ur` remains accepted. Matching
|
|
26
|
+
is word-bounded and skips fenced code and quoted replies, so `@urgent`,
|
|
27
|
+
`me@ur.example`, and bots quoting an earlier comment no longer start runs.
|
|
28
|
+
- Fixed the installed workflow being inert: the installer wrote
|
|
29
|
+
`.github/workflows/ur.yml` but never committed `.ur/agentic-ci/default.yaml`,
|
|
30
|
+
so every run aborted with "Spec not found" before the agent started. Both
|
|
31
|
+
files now land in the same pull request.
|
|
32
|
+
- Added a trusted publisher so a mention produces visible feedback: an eyes
|
|
33
|
+
reaction and a tracking comment that is edited in place with the summary,
|
|
34
|
+
verification table, and proposed diff. The job that reads untrusted event
|
|
35
|
+
text still holds no write token — it emits the bounded hash-addressed patch
|
|
36
|
+
artifact, and a separate write-scoped job consumes only that artifact.
|
|
37
|
+
Agent-authored text reaches the publisher through `jq --rawfile`, never
|
|
38
|
+
through shell interpolation.
|
|
39
|
+
- Added opt-in `publish.mode: pull-request`, which applies the verified patch
|
|
40
|
+
and opens a PR. It is the only mode granting `contents: write`;
|
|
41
|
+
`publish.mode: artifact` restores the previous producer-only single job.
|
|
42
|
+
- Added the composite action at the repository root, so
|
|
43
|
+
`uses: Maitham16/UR@v1` resolves. `ur-review.yml` referenced it but no
|
|
44
|
+
`action.yml` existed, so that workflow failed immediately.
|
|
45
|
+
- Fixed the compiled workflow emitting an invalid folded scalar: continuation
|
|
46
|
+
lines of the job `if:` expression were indented below the block indent.
|
|
47
|
+
- Fixed the installer's secret rename only rewriting the composite-action input
|
|
48
|
+
form, which left the Agentic CI workflow pointing at a nonexistent
|
|
49
|
+
`secrets.UR_API_KEY` whenever a custom secret name was chosen.
|
|
50
|
+
- Restricted trigger keywords to a charset that cannot terminate a GitHub
|
|
51
|
+
workflow expression.
|
|
52
|
+
|
|
3
53
|
## 1.49.0
|
|
4
54
|
|
|
5
55
|
- Added cryptographically signed A2A Agent Cards: RFC 7515 detached JWS over
|