Skip to content

Repository navigation

chore(deps): update pullfrog/pullfrog action to v0.1.118 - #2044

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/pullfrog-pullfrog-0.x
Nov 9, 2026
Merged

chore(deps): update pullfrog/pullfrog action to v0.1.118#2044
renovate[bot] merged 1 commit into
mainfrom
renovate/pullfrog-pullfrog-0.x

Conversation

@renovate

@renovate renovate Bot commented Nov 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
pullfrog/pullfrog action patch v0.1.117 → v0.1.118 v0.1.123 (+4)

Release Notes

pullfrog/pullfrog

v0.1.118

Compare Source

This release stops processes outside the shell sandbox from running files a shell command planted, and judges OpenCode's file tools by where a path really leads.

[!IMPORTANT]
Three changes can surface in an existing setup:

  • A repo's own MCP server or formatter needs an absolute path if its command lives only in a directory shell commands can write, such as ~/.local/bin. Linux CI only (ad37776f)
  • OpenCode's file tools refuse a symlink that leaves the repo, /tmp and the run's temporary directory, such as bazel-* or a nix result. Shell commands still follow it (ad37776f)
  • A run stops if its checkout, or a directory above it, is moved (ad37776f)

Sandbox

Area What changed Link
PATH outside the sandbox The agent harnesses and Pullfrog's own processes find tools only in a per-run directory shell commands cannot write, and in directories root controls. Before, a file planted in a writable PATH directory ran outside the sandbox. Shell commands keep the full PATH, and shell: enabled is unchanged ad37776f
Shell and git config A ~/.bashrc or ~/.gitconfig written by a shell command no longer reaches a harness's own processes. Codex's shell snapshot is off unless shell is enabled ad37776f
OpenCode file tools read, grep, glob, write, edit and patch are checked against where a path leads once symlinks are followed. Before, the check read the path as written ad37776f
.git Pullfrog records .git once the checkout is set up, and its authenticated git calls and later shell commands refuse one that has since been replaced ad37776f
agent-browser Installs from its npm tarball instead of running npm during the run ad37776f

Full Changelog: pullfrog/pullfrog@v0.1.117...v0.1.118

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai

coderabbitai Bot commented Nov 8, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 56fd3433-9771-40cb-9766-2b324ec2b875

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Nov 8, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs		 ccusage-guide 0a4015e Commit Preview URL

Branch Preview URL		 Nov 08 2026, 09:53 PM

@pkg-pr-new

pkg-pr-new Bot commented Nov 8, 2026

Copy link
Copy Markdown

Open in StackBlitz

ccusage

npx https://pkg.pr.new/ccusage@2044

@ccusage/ccusage-darwin-arm64

npx https://pkg.pr.new/@ccusage/ccusage-darwin-arm64@2044

@ccusage/ccusage-darwin-x64

npx https://pkg.pr.new/@ccusage/ccusage-darwin-x64@2044

@ccusage/ccusage-linux-arm64

npx https://pkg.pr.new/@ccusage/ccusage-linux-arm64@2044

@ccusage/ccusage-linux-x64

npx https://pkg.pr.new/@ccusage/ccusage-linux-x64@2044

@ccusage/ccusage-win32-x64

npx https://pkg.pr.new/@ccusage/ccusage-win32-x64@2044

commit: 0a4015e

@github-actions

github-actions Bot commented Nov 8, 2026

Copy link
Copy Markdown
Contributor

ccusage performance comparison

PR SHA: 0a4015eb3480
Base SHA: d3413d8e5b09

Performance comparison skipped.

Base package URL was not ready before 300.000s. Fixture performance comparison requires a base package when --base-dir is not provided.

Base package: d3413d8e5b09

@github-actions

github-actions Bot commented Nov 8, 2026

Copy link
Copy Markdown
Contributor

ccusage performance comparison

PR SHA: 0a4015eb3480
Base SHA: d3413d8e5b09

Performance comparison skipped.

Base package URL was not ready before 300.000s. Fixture performance comparison requires a base package when --base-dir is not provided.

Base package: d3413d8e5b09

@renovate
renovate Bot merged commit fe27780 into main Nov 9, 2026
58 checks passed
@renovate
renovate Bot deleted the renovate/pullfrog-pullfrog-0.x branch November 9, 2026 03:02
@github-actions github-actions Bot mentioned this pull request Nov 8, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes

Assignees

No one assigned

Labels

dependencies renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants