Skip to content

merge: replay ci batch 20260226-01#390

Closed
KooshaPari wants to merge 682 commits intorouter-for-me:mainfrom
KooshaPari:merge/ci-batch-20260226-01
Closed

merge: replay ci batch 20260226-01#390
KooshaPari wants to merge 682 commits intorouter-for-me:mainfrom
KooshaPari:merge/ci-batch-20260226-01

Conversation

@KooshaPari
Copy link

Merge summary

This batch continues migrated-branch replay for a large 12-lane set. Most branches were clean no-op against this batch due duplicate/overlapping patch content.

Included commits

Notes

  • migrated-ci-fix-migrated-router-20260225060000-feature_ampcode-alias could not be cherry-picked cleanly due workflow context drift. Applied equivalent workflow-only patch and committed as 63583ed0.
  • Branches 1233, 1599, 1668, 1686, 1699, 1648, 1672, 1673, 1682, 1684, 1698*, and similar were no-op/already represented after prior merges.

KooshaPari and others added 30 commits February 22, 2026 22:28
Build Fixes:
- Fix duplicate type definitions in kiro_websearch_handler.go (McpRequest, McpResponse, WebSearchResults)
- Fix undefined authID and wsURL variables in codex_websockets_executor.go by naming parameters
- Remove unused imports (crypto/sha256, encoding/hex) from codex_websockets_executor.go
- Add missing syscall import to cmd/cliproxyctl/main.go for error handling
- Remove incomplete showConfigPaths block from cmd/server/main.go (undefined functions)
- Remove unused strings import from copilot/token_test.go

Track 1.2 - ACP Adapter:
- Implement ACP adapter to translate Claude/OpenAI protocol messages to ACP protocol
- Add acp_request.go: Request translation and validation
- Add acp_response.go: Response translation and formatting
- Add acp_adapter.go: Main adapter logic with registry integration
- Add unit tests in acp_adapter_registry_test.go

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
chore: merge ci-compile-fix-clean-single lane closeout and fixes
# Conflicts:
#	pkg/llmproxy/api/handlers/management/auth_files.go
#	pkg/llmproxy/api/handlers/management/management_extra_test.go
KooshaPari and others added 26 commits February 24, 2026 23:59
…type

- Fixed missing closing brace in for loop
- Changed return type from string to bool for proper if statement usage
- Updated caller to use boolean check
- Fix unused sync/atomic import in kiro_websearch_handler.go
- Fix handlers_metadata_test.go to use correct gin context key
- Remove broken test files with undefined symbols

Testing: Build PASS, Vet PASS, Tests PASS
…2-20260223-034902' into cliproxy-clean-merge
…2-20260223-035004' into cliproxy-clean-merge
@gemini-code-assist
Copy link

Summary of Changes

Hello @KooshaPari, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request integrates a substantial batch of changes aimed at fortifying the project's development infrastructure and operational capabilities. The updates span across continuous integration, code quality, security, and developer tooling, ensuring a more robust and maintainable codebase. Significant effort has been placed on refining automated checks, standardizing configuration management, and enhancing the CLI experience for various authentication flows and provider integrations.

Highlights

  • Comprehensive CI/CD Enhancements: Introduced a wide array of new GitHub Actions workflows and shell scripts to bolster code quality, security, and release processes, including checks for external endpoints, distributed critical paths, documentation secret samples, and workflow token permissions.
  • Developer Experience and Tooling: Expanded the cliproxyctl CLI tool with new commands and improved JSON output, alongside new Docker-related files, example configurations for launchd and systemd, and a Taskfile.yml for streamlined project automation.
  • Security and Code Quality Policies: Added code scanning suppressions, Dependabot configuration, and policies for approved external endpoints, reinforcing the project's security posture and dependency management.
  • Management API and Authentication Improvements: Enhanced the management API with new handlers for authentication file management, OAuth token refresh for various providers (e.g., Antigravity, Copilot), log management, and dynamic configuration updates.
  • Amp CLI Integration Module: Integrated a new Amp module for CLI, providing reverse proxy capabilities, provider-specific route aliases, and model mapping for routing unavailable models to alternatives, with support for hot-reloading configurations.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Changelog
  • .github/code-scanning/suppressions.md
    • Added code scanning suppressions for known acceptable patterns.
  • .github/dependabot.yml
    • Added Dependabot configuration for version updates.
  • .github/policies/approved-external-endpoints.txt
    • Added a policy file for approved external endpoint hosts.
  • .github/release-required-checks.txt
    • Added a list of required checks for releases.
  • .github/required-checks.txt
    • Added a list of required checks for pull requests.
  • .github/scripts/check-approved-external-endpoints.sh
    • Added a script to check for unapproved external endpoint hosts.
  • .github/scripts/check-distributed-critical-paths.sh
    • Added a script to validate distributed critical paths.
  • .github/scripts/check-docs-secret-samples.sh
    • Added a script to check for potential secrets in documentation samples.
  • .github/scripts/check-open-items-fragmented-parity.sh
    • Added a script to prevent stale status drift in fragmented open-items reports.
  • .github/scripts/check-phase-doc-placeholder-tokens.sh
    • Added a script to reject unresolved placeholder-like tokens in planning reports.
  • .github/scripts/check-workflow-token-permissions.sh
    • Added a script to check GitHub Actions workflow token permissions.
  • .github/scripts/release-lint.sh
    • Added a script to validate release-facing config examples and docs snippets.
  • .github/scripts/tests/check-lane-f2-cpb-0691-0700.sh
    • Added a test script for lane-f2 CPB items.
  • .github/scripts/tests/check-open-items-fragmented-parity-test.sh
    • Added a test script for the open-items fragmented parity check.
  • .github/scripts/tests/check-wave80-lane-d-cpb-0556-0610.sh
    • Added a test script for wave80 lane-d CPB items.
  • .github/scripts/tests/check-wave80-lane-e-cpb-0581-0590.sh
    • Added a test script for wave80 lane-e CPB items.
  • .github/scripts/tests/check-wave80-lane-f-cpb-0546-0555.sh
    • Added a test script for wave80 lane-f CPB items.
  • .github/scripts/tests/fixtures/open-items-parity/fail-missing-status.md
    • Added a test fixture for missing status in open-items parity.
  • .github/scripts/tests/fixtures/open-items-parity/fail-status-partial.md
    • Added a test fixture for partial status in open-items parity.
  • .github/scripts/tests/fixtures/open-items-parity/pass-hash-status-done.md
    • Added a test fixture for done status in open-items parity.
  • .github/scripts/tests/fixtures/open-items-parity/pass-status-implemented.md
    • Added a test fixture for implemented status in open-items parity.
  • .golangci.yml
    • Added Go linter configuration.
  • .pre-commit-config.yaml
    • Added pre-commit and pre-push hook configurations.
  • .worktrees/config/m/config-build/active/.dockerignore
    • Added Docker ignore rules.
  • .worktrees/config/m/config-build/active/.env.example
    • Added an example environment configuration file.
  • .worktrees/config/m/config-build/active/.github/FUNDING.yml
    • Added GitHub funding configuration.
  • .worktrees/config/m/config-build/active/.github/ISSUE_TEMPLATE/bug_report.md
    • Added a bug report issue template.
  • .worktrees/config/m/config-build/active/.github/dependabot.yml
    • Added Dependabot configuration.
  • .worktrees/config/m/config-build/active/.github/policies/approved-external-endpoints.txt
    • Added a policy for approved external endpoints.
  • .worktrees/config/m/config-build/active/.github/release-required-checks.txt
    • Added release required checks.
  • .worktrees/config/m/config-build/active/.github/required-checks.txt
    • Added required checks.
  • .worktrees/config/m/config-build/active/.github/scripts/check-approved-external-endpoints.sh
    • Added script to check approved external endpoints.
  • .worktrees/config/m/config-build/active/.github/scripts/check-distributed-critical-paths.sh
    • Added script to check distributed critical paths.
  • .worktrees/config/m/config-build/active/.github/scripts/check-docs-secret-samples.sh
    • Added script to check docs secret samples.
  • .worktrees/config/m/config-build/active/.github/scripts/check-open-items-fragmented-parity.sh
    • Added script to check open items fragmented parity.
  • .worktrees/config/m/config-build/active/.github/scripts/check-phase-doc-placeholder-tokens.sh
    • Added script to check phase doc placeholder tokens.
  • .worktrees/config/m/config-build/active/.github/scripts/check-workflow-token-permissions.sh
    • Added script to check workflow token permissions.
  • .worktrees/config/m/config-build/active/.github/scripts/release-lint.sh
    • Added release lint script.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/check-lane-f2-cpb-0691-0700.sh
    • Added test script for lane-f2 CPB.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/check-open-items-fragmented-parity-test.sh
    • Added test script for open-items fragmented parity.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/check-wave80-lane-d-cpb-0556-0610.sh
    • Added test script for wave80 lane-d CPB.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/check-wave80-lane-e-cpb-0581-0590.sh
    • Added test script for wave80 lane-e CPB.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/check-wave80-lane-f-cpb-0546-0555.sh
    • Added test script for wave80 lane-f CPB.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/fixtures/open-items-parity/fail-missing-status.md
    • Added test fixture for missing status.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/fixtures/open-items-parity/fail-status-partial.md
    • Added test fixture for partial status.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/fixtures/open-items-parity/pass-hash-status-done.md
    • Added test fixture for done status.
  • .worktrees/config/m/config-build/active/.github/scripts/tests/fixtures/open-items-parity/pass-status-implemented.md
    • Added test fixture for implemented status.
  • .worktrees/config/m/config-build/active/.github/workflows/ci-rerun-flaky.yml
    • Added workflow for rerunning flaky CI jobs.
  • .worktrees/config/m/config-build/active/.github/workflows/codeql.yml
    • Added CodeQL workflow for security analysis.
  • .worktrees/config/m/config-build/active/.github/workflows/docker-image.yml
    • Added workflow for building and pushing Docker images.
  • .worktrees/config/m/config-build/active/.github/workflows/generate-sdks.yaml
    • Added workflow for generating SDKs.
  • .worktrees/config/m/config-build/active/.github/workflows/pr-path-guard.yml
    • Added workflow for guarding sensitive paths in PRs.
  • .worktrees/config/m/config-build/active/.github/workflows/pr-test-build.yml
    • Added workflow for pull request test builds.
  • .worktrees/config/m/config-build/active/.github/workflows/release-batch.yaml
    • Added workflow for creating release batches.
  • .worktrees/config/m/config-build/active/.github/workflows/release.yaml
    • Added workflow for GoReleaser.
  • .worktrees/config/m/config-build/active/.github/workflows/required-check-names-guard.yml
    • Added workflow for verifying required check names.
  • .worktrees/config/m/config-build/active/.github/workflows/vitepress-pages.yml
    • Added workflow for VitePress pages deployment.
  • .worktrees/config/m/config-build/active/.gitignore
    • Added Git ignore rules.
  • .worktrees/config/m/config-build/active/.golangci.yml
    • Added Go linter configuration.
  • .worktrees/config/m/config-build/active/.goreleaser.yml
    • Added GoReleaser configuration.
  • .worktrees/config/m/config-build/active/.pre-commit-config.yaml
    • Added pre-commit hook configuration.
  • .worktrees/config/m/config-build/active/CHANGELOG.md
    • Added changelog file.
  • .worktrees/config/m/config-build/active/CONTRIBUTING.md
    • Added contributing guidelines.
  • .worktrees/config/m/config-build/active/Dockerfile
    • Added Dockerfile.
  • .worktrees/config/m/config-build/active/LICENSE
    • Added license file.
  • .worktrees/config/m/config-build/active/README.md
    • Added project README.
  • .worktrees/config/m/config-build/active/README_CN.md
    • Added Chinese README.
  • .worktrees/config/m/config-build/active/README_FA.md
    • Added Farsi README.
  • .worktrees/config/m/config-build/active/SECURITY.md
    • Added security policy.
  • .worktrees/config/m/config-build/active/Taskfile.yml
    • Added Taskfile for project automation.
  • .worktrees/config/m/config-build/active/api/openapi.yaml
    • Added OpenAPI specification.
  • .worktrees/config/m/config-build/active/cliproxyctl/main.go
    • Added main file for cliproxyctl CLI tool.
  • .worktrees/config/m/config-build/active/cliproxyctl/main_test.go
    • Added tests for cliproxyctl CLI tool.
  • .worktrees/config/m/config-build/active/cmd/boardsync/main.go
    • Added main file for board synchronization tool.
  • .worktrees/config/m/config-build/active/cmd/cliproxyctl/main.go
    • Added main file for cliproxyctl CLI tool.
  • .worktrees/config/m/config-build/active/cmd/cliproxyctl/main_test.go
    • Added tests for cliproxyctl CLI tool.
  • .worktrees/config/m/config-build/active/cmd/codegen/main.go
    • Added main file for code generation tool.
  • .worktrees/config/m/config-build/active/cmd/releasebatch/main.go
    • Added main file for release batch management tool.
  • .worktrees/config/m/config-build/active/cmd/releasebatch/main_test.go
    • Added tests for release batch management tool.
  • .worktrees/config/m/config-build/active/cmd/server/config_path.go
    • Added config path resolution logic for the server.
  • .worktrees/config/m/config-build/active/cmd/server/config_path_test.go
    • Added tests for config path resolution.
  • .worktrees/config/m/config-build/active/cmd/server/config_validate.go
    • Added config validation logic for the server.
  • .worktrees/config/m/config-build/active/cmd/server/config_validate_test.go
    • Added tests for config validation.
  • .worktrees/config/m/config-build/active/cmd/server/main.go
    • Added main server entry point.
  • .worktrees/config/m/config-build/active/config.example.yaml
    • Added example configuration file.
  • .worktrees/config/m/config-build/active/contracts/cliproxyctl-response.schema.json
    • Added JSON schema for cliproxyctl responses.
  • .worktrees/config/m/config-build/active/docker-build.ps1
    • Added PowerShell script for Docker build.
  • .worktrees/config/m/config-build/active/docker-build.sh
    • Added shell script for Docker build.
  • .worktrees/config/m/config-build/active/docker-compose.yml
    • Added Docker Compose configuration.
  • .worktrees/config/m/config-build/active/docker-init.sh
    • Added Docker initialization script.
  • .worktrees/config/m/config-build/active/examples/custom-provider/main.go
    • Added example for custom provider integration.
  • .worktrees/config/m/config-build/active/examples/http-request/main.go
    • Added example for HTTP request with provider credentials.
  • .worktrees/config/m/config-build/active/examples/launchd/com.router-for-me.cliproxyapi-plusplus.plist
    • Added Launchd example configuration.
  • .worktrees/config/m/config-build/active/examples/process-compose.dev.yaml
    • Added development process-compose configuration.
  • .worktrees/config/m/config-build/active/examples/process-compose.yaml
    • Added process-compose configuration.
  • .worktrees/config/m/config-build/active/examples/systemd/cliproxyapi-plusplus.env
    • Added systemd environment file example.
  • .worktrees/config/m/config-build/active/examples/systemd/cliproxyapi-plusplus.service
    • Added systemd service file example.
  • .worktrees/config/m/config-build/active/examples/translator/main.go
    • Added example for translator usage.
  • .worktrees/config/m/config-build/active/examples/windows/cliproxyapi-plusplus-service.ps1
    • Added Windows service PowerShell script example.
  • .worktrees/config/m/config-build/active/go.mod
    • Updated Go module dependencies.
  • .worktrees/config/m/config-build/active/go.sum
    • Updated Go module checksums.
  • .worktrees/config/m/config-build/active/internal/access/config_access/provider.go
    • Added config access provider.
  • .worktrees/config/m/config-build/active/internal/access/reconcile.go
    • Added access provider reconciliation logic.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/api_tools.go
    • Added management API tools, including OAuth token refresh and Copilot quota.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/api_tools_cbor_test.go
    • Added CBOR support tests for API tools.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/api_tools_test.go
    • Added tests for API tools.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/auth_files.go
    • Added handlers for managing authentication files.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/config_basic.go
    • Added basic config management handlers.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/config_lists.go
    • Added handlers for managing config lists (e.g., API keys, model aliases).
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/handler.go
    • Added base handler for management API.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/logs.go
    • Added handlers for log management.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/model_definitions.go
    • Added handlers for model definitions.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/oauth_callback.go
    • Added OAuth callback handler.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/oauth_sessions.go
    • Added OAuth session management.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/quota.go
    • Added quota management handlers.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/usage.go
    • Added usage statistics handlers.
  • .worktrees/config/m/config-build/active/internal/api/handlers/management/vertex_import.go
    • Added Vertex credential import handler.
  • .worktrees/config/m/config-build/active/internal/api/middleware/request_logging.go
    • Added request logging middleware.
  • .worktrees/config/m/config-build/active/internal/api/middleware/request_logging_test.go
    • Added tests for request logging middleware.
  • .worktrees/config/m/config-build/active/internal/api/middleware/response_writer.go
    • Added response writer wrapper for logging.
  • .worktrees/config/m/config-build/active/internal/api/middleware/response_writer_test.go
    • Added tests for response writer wrapper.
  • .worktrees/config/m/config-build/active/internal/api/modules/amp/amp.go
    • Added Amp module for CLI integration.
  • .worktrees/config/m/config-build/active/internal/api/modules/amp/amp_test.go
    • Added tests for Amp module.
  • internal/config/oauth_model_alias_migration_test.go
    • Renamed to .worktrees/config/m/config-build/active/internal/config/oauth_model_alias_migration_test.go.
  • internal/config/oauth_model_alias_test.go
    • Renamed to .worktrees/config/m/config-build/active/internal/config/oauth_model_alias_test.go.
Ignored Files
  • Ignored by pattern: .github/workflows/** (10)
    • .github/workflows/auto-merge.yml
    • .github/workflows/ci-rerun-flaky.yml
    • .github/workflows/codeql.yml
    • .github/workflows/docs.yml
    • .github/workflows/generate-sdks.yaml
    • .github/workflows/pr-path-guard.yml
    • .github/workflows/pr-test-build.yml
    • .github/workflows/release-batch.yaml
    • .github/workflows/required-check-names-guard.yml
    • .github/workflows/vitepress-pages.yml
Activity
  • This pull request is a batch merge, integrating a large set of changes from multiple migrated branches.
  • One branch, 'migrated-ci-fix-migrated-router-20260225060000-feature_ampcode-alias', required a workflow-only patch due to workflow context drift, which was committed as '63583ed0'.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request is a large batch merge that introduces a significant number of new files for CI/CD, configuration, and new API functionality. My review has identified several critical issues related to unresolved merge conflicts in configuration and script files, which must be addressed before this PR can be merged. Additionally, there are high-severity issues with invalid Dependabot configurations and the use of placeholder credentials in the code. I've also noted a medium-severity issue regarding a hardcoded timezone in the Dockerfile.

Comment on lines +13 to +16
<<<<<<< HEAD
=======
- Support multiple aliases for a single upstream model in OAuth model alias configuration, preserving compatibility while allowing same upstream model name with distinct aliases.
>>>>>>> archive/pr-234-head-20260223

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

This file contains merge conflict markers (<<<<<<<, =======, >>>>>>>). These must be resolved before merging.

Comment on lines +359 to +377
<<<<<<< HEAD
- task: quality:docs-phase-placeholders
=======
>>>>>>> archive/pr-234-head-20260223
- ./.github/scripts/release-lint.sh

quality:docs-open-items-parity:
desc: "Prevent stale status drift in fragmented open-items report"
cmds:
- ./.github/scripts/check-open-items-fragmented-parity.sh

<<<<<<< HEAD
quality:docs-phase-placeholders:
desc: "Reject unresolved placeholder-like tokens in planning reports"
cmds:
- ./.github/scripts/check-phase-doc-placeholder-tokens.sh

=======
>>>>>>> archive/pr-234-head-20260223

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

This file contains merge conflict markers (<<<<<<<, =======, >>>>>>>). These must be resolved before merging.

Comment on lines +13 to +29
<<<<<<< HEAD
=======
# Normalize CONFIG_FILE when mount points incorrectly create a directory.
if [ -d "${CONFIG_FILE}" ]; then
CONFIG_FILE="${CONFIG_FILE%/}/config.yaml"
fi

>>>>>>> archive/pr-234-head-20260223
# Create auth directory if it doesn't exist
if [ ! -d "${AUTH_DIR}" ]; then
echo "[docker-init] Creating auth directory: ${AUTH_DIR}"
mkdir -p "${AUTH_DIR}"
fi
<<<<<<< HEAD
=======
chmod 700 "${AUTH_DIR}"
>>>>>>> archive/pr-234-head-20260223

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

This file contains merge conflict markers (<<<<<<<, =======, >>>>>>>). These must be resolved before merging.

Comment on lines +10 to +18
<<<<<<< HEAD
health-probe:
command: "sh -lc 'while true; do curl -fsS http://localhost:8317/health >/dev/null 2>&1 || true; sleep 20; done'"
working_dir: "."
availability:
restart: "always"
=======

>>>>>>> archive/pr-234-head-20260223

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

This file contains merge conflict markers (<<<<<<<, =======, >>>>>>>). These must be resolved before merging.


version: 2
updates:
- package-ecosystem: "" # See documentation for possible values haha

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The package-ecosystem is empty, which will cause Dependabot to fail. You need to specify a valid package ecosystem, for example, gomod for Go modules. The comment haha suggests this might be intentional, but it leaves the configuration non-functional.

  - package-ecosystem: "gomod" # See documentation for possible values haha


version: 2
updates:
- package-ecosystem: "" # See documentation for possible values haha

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The package-ecosystem is empty, which will cause Dependabot to fail. You need to specify a valid package ecosystem, for example, gomod for Go modules. The comment haha suggests this might be intentional, but it leaves the configuration non-functional.

  - package-ecosystem: "gomod" # See documentation for possible values haha

Comment on lines +36 to +41
if geminiOAuthClientID == "" {
geminiOAuthClientID = "PLACEHOLDER_SET_FROM_CONFIG"
}
if geminiOAuthClientSecret == "" {
geminiOAuthClientSecret = "PLACEHOLDER_SET_FROM_CONFIG"
}

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The geminiOAuthClientID and geminiOAuthClientSecret are initialized with placeholder values if the corresponding environment variables are not set. This can lead to runtime failures with misleading error messages if the environment is not configured correctly. It would be more robust to check for the presence of these credentials at startup and fail fast with a clear error message if they are missing.

Suggested change
if geminiOAuthClientID == "" {
geminiOAuthClientID = "PLACEHOLDER_SET_FROM_CONFIG"
}
if geminiOAuthClientSecret == "" {
geminiOAuthClientSecret = "PLACEHOLDER_SET_FROM_CONFIG"
}
if geminiOAuthClientID == "" {
log.Warn("GEMINI_OAUTH_CLIENT_ID is not set. Gemini OAuth flow will likely fail.")
}
if geminiOAuthClientSecret == "" {
log.Warn("GEMINI_OAUTH_CLIENT_SECRET is not set. Gemini OAuth flow will likely fail.")
}


EXPOSE 8317

ENV TZ=Asia/Shanghai

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The timezone is hardcoded to Asia/Shanghai. For a general-purpose Docker image, it's better to default to UTC or make it configurable at runtime via an environment variable. You could default to UTC and document that users can override it with -e TZ=....

ENV TZ=UTC

@luispater luispater closed this Feb 26, 2026
@KooshaPari KooshaPari deleted the merge/ci-batch-20260226-01 branch February 27, 2026 09:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants