Repository navigation
chore(deps): update pullfrog/pullfrog action to v0.1.113 - #2035
Conversation
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
ccusage
@ccusage/ccusage-darwin-arm64
@ccusage/ccusage-darwin-x64
@ccusage/ccusage-linux-arm64
@ccusage/ccusage-linux-x64
@ccusage/ccusage-win32-x64
commit: |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
ccusage-guide | 0649ee5 | Commit Preview URL Branch Preview URL |
Nov 06 2026, 10:04 PM |
ccusage performance comparisonPR SHA: This compares the Rust PR release binary against the configured base package on the same CI runner. Package runtime diagnosticsCompares the PR package wrapper, the installed native optional dependency binary, and the workspace release binary on the same large fixture. This identifies whether slow package results come from JavaScript wrapper overhead, the published native binary build, or the Rust core itself. Fixtures: Claude
Committed fixture performanceCommitted small fixtures for stable PR-to-PR feedback and explicit Claude/Codex command coverage. Fixtures: Claude
Large real-world-shaped fixture performanceGenerated fixtures shaped from aggregate local log statistics: thousands of JSONL files, many small sessions, and a long tail of larger sessions. No real prompts, paths, or outputs are stored in the fixtures. Fixtures: Claude
Artifact size
Lower medians and smaller artifacts are better. CI runner noise still applies; use same-run ratios as directional PR feedback, not release guarantees. |
ccusage performance comparisonPR SHA: This compares the PR package against the configured base package on the same CI runner. Package runtime diagnosticsCompares the PR package wrapper, the installed native optional dependency binary, and the workspace release binary on the same large fixture. This identifies whether slow package results come from JavaScript wrapper overhead, the published native binary build, or the Rust core itself. Fixtures: Claude
Committed fixture performanceCommitted small fixtures for stable PR-to-PR feedback and explicit Claude/Codex command coverage. Fixtures: Claude
Large real-world-shaped fixture performanceGenerated fixtures shaped from aggregate local log statistics: thousands of JSONL files, many small sessions, and a long tail of larger sessions. No real prompts, paths, or outputs are stored in the fixtures. Fixtures: Claude
Artifact size
Lower medians and smaller artifacts are better. CI runner noise still applies; use same-run ratios as directional PR feedback, not release guarantees. |
This PR contains the following updates:
v0.1.111→v0.1.113v0.1.121(+7)Release Notes
pullfrog/pullfrog
v0.1.113Compare Source
Pullfrog's own git commands and dependency installs now run inside the shell sandbox, so code a repository plants in a git hook or install script can no longer read the run's credentials; the OSS model menu and Zen's free models also change.
Sandboxed git and installs
The agent's shell commands already ran in a PID namespace with a filtered environment. Pullfrog's own
gitcalls (thegittool,push_branch, checkout, merge, the post-run status check) and the Node and Python dependency installers ran in the action's own process instead. Acore.fsmonitor, hook or filter planted in~/.gitconfig, or apostinstallscript, could then read the action's/proc/<pid>/environ, which holds the job token, the credentials that request an OIDC token, and the workflow'senv:secrets.a120452.gitstays writable for them, so husky, lefthook andpre-commit installstill register their hooks and those hooks still run on the agent's commitsa120452url.*.insteadOfrewrite toext::, a remote helper or ssh can no longer run a commanda120452Models
openrouter/minimax-flashalias joins the catalog and replaces MiniMax M2 on the funded OSS menu. Picks of OpenRouter's M2 fall back to it71f12e6deepseek-flashalias follows models.dev's current id instead of one dated OpenRouter snapshot. It now resolves to the 1017 snapshot71f12e6994aaf9Reviews
checkout_prreply tells a review to list a changed function's call sites withcodenav callers. Codenav is now off whenever the sandbox check turns the shell off93c5467Full Changelog: pullfrog/pullfrog@v0.1.112...v0.1.113
v0.1.112Compare Source
OpenCode V2 runs wait for slow plugins to finish activating instead of failing at startup, and Zen's free Pulse Alpha joins the model catalog.
OpenCode V2
Location plugins did not finish activating, which is how OpenCode V2's server refuses requests once its 5-second wait for plugins runs outa0747deModels
opencode/pulse-alphaadds Zen's free stealth preview. Effort spanslow,highandmax. Zen may retain free-period data and use it to improve the modela7fa63aFull Changelog: pullfrog/pullfrog@v0.1.111...v0.1.112
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.