Repository navigation
chore(deps): bump agent-stack-go to v1.3.0 - #105
Merged
Merged
Conversation
v1.3.0 carries the plain Writer file lock (agent-stack-go#78): event.Writer takes an exclusive flock per Write, as ChainedWriter already did. idryx's events sink writes through event.Writer, so this closes the unlocked append on a shared bus. Pin only: go.mod and go.sum, no code, no new dependency. Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
TAIPANBOX
added a commit
that referenced
this pull request
Oct 19, 2026
…acy format (#109) The idryx image is signed in the legacy .sig format the cluster admission controller reads. Since 1.2.1 four commits land: the agent-stack-go v1.3.0 bump (bf547eb, #105), the v2 module path (#107) and the legacy-format signature (#108). Nothing read, emitted, refused or stored differently.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What and why
Pins
github.com/TAIPANBOX/agent-stack-gofrom v1.1.0 to v1.3.0 (tag on fcb208a, the merge of agent-stack-go #79). v1.3.0 carries agent-stack-go #78:event.Writertakes an exclusiveflockperWrite, asChainedWriteralready did.idryx's event sink (
internal/events/events.go) writes throughevent.Writer, so this closes the unlocked append on a shared bus. Pin only:go.modandgo.sum, no code, no new dependency.Hot path cost
Send(internal/events) is called from the detect run incmd/idryx/main.go(runDetect, line 804), once per alert, after the detection pass. This is a batch CLI, not an HTTP request path;serveis a read-only dashboard and does not write.IDRYX_EVENTSunset, nothing is written and the path is unchanged.Gates (local, go1.27.2)
gofmt -l .go vet ./...GOTOOLCHAIN=go1.27.1 GOOS=linux staticcheck ./...(as CI builds on ubuntu)go build ./...go test -race -count=1 ./...govulncheck ./...readme-numbers.shreproducible-build.shebpf-optional.shdiagrams-match-detectors.shdetectors-complete.shcompat-surface.shfeatures-are-bound.shgates-have-teeth.shpreflight.sh prNote: a plain
GOOS=darwinstaticcheck reports an unused constant ininternal/ebpfcapture/self.go. That file is Linux-only in use and the CI staticcheck runs on Linux; it is not touched by this PR.Coverage: a pin change touches no package, so nothing moved.
NOT proven
🤖 Generated with Claude Code