Daily PR/CI Summary

[github-actions]

Daily PR and CI Summary

Generated: 2026-08-29T13:08:09.142Z

PR Overview

• Open PRs (base main): 9
• Bot PRs: 9
• Human PRs: 0

Open PR List

• #117 chore(deps): bump @hono/node-server from 1.19.13 to 1.19.17
• #116 chore(deps-dev): bump js-yaml from 4.2.0 to 4.3.1
• #115 chore(deps): bump the npm-minor-patch group across 1 directory with 12 updates
• #114 chore(deps): bump hono from 4.12.26 to 4.13.1
• #113 chore(deps): bump fast-uri from 3.1.2 to 3.1.5
• #111 chore(deps): bump ip-address from 10.2.0 to 10.4.0
• #109 chore(deps): bump postcss from 8.5.15 to 8.5.25
• #108 chore(deps-dev): bump brace-expansion from 1.1.15 to 1.1.16
• #103 chore(deps): bump body-parser from 2.2.2 to 2.3.0

Failing PR Checks

• #117 chore(deps): bump @hono/node-server from 1.19.13 to 1.19.17
  • SBOM and Trivy: https://github.com/amitrintzler/plugscout/actions/runs/31635570536/job/94244899087
• #116 chore(deps-dev): bump js-yaml from 4.2.0 to 4.3.1
  • SBOM and Trivy: https://github.com/amitrintzler/plugscout/actions/runs/31548923184/job/93967161113
• #115 chore(deps): bump the npm-minor-patch group across 1 directory with 12 updates
  • Trivy: https://github.com/amitrintzler/plugscout/runs/93347571677
  • SBOM and Trivy: https://github.com/amitrintzler/plugscout/actions/runs/31353111218/job/93347491681
• #114 chore(deps): bump hono from 4.12.26 to 4.13.1
  • SBOM and Trivy: https://github.com/amitrintzler/plugscout/actions/runs/31320748246/job/93263223594
• #113 chore(deps): bump fast-uri from 3.1.2 to 3.1.5
  • SBOM and Trivy: https://github.com/amitrintzler/plugscout/actions/runs/31039265391/job/92419252723
• #111 chore(deps): bump ip-address from 10.2.0 to 10.4.0
  • SBOM and Trivy: https://github.com/amitrintzler/plugscout/actions/runs/30871278536/job/91873622992
• #109 chore(deps): bump postcss from 8.5.15 to 8.5.25
  • SBOM and Trivy: https://github.com/amitrintzler/plugscout/actions/runs/30732196611/job/91454451534
• #108 chore(deps-dev): bump brace-expansion from 1.1.15 to 1.1.16
  • SBOM and Trivy: https://github.com/amitrintzler/plugscout/actions/runs/30428498212/job/90500138368

Failed Workflow Runs (Last 24h)

• No failed workflow runs in the last 24 hours.

This issue is updated daily by workflow automation.

[amitrintzler]

Resolved the failures reported in this summary.\n\nRoot cause\n- failed because workflow steps searched in repo, while runtime state was written under default path.\n\nFix applied\n- Commit: \n- Updated workflows to use deterministic state root in Actions: where repo-backed checks are expected.\n- Hardened report lookup to avoid hard-fail when report path is empty.\n\nFiles changed\n- \n- \n- \n\nVerification\n- Manual Daily Security run on fix commit: success\n - https://github.com/amitrintzler/skills-and-mcps/actions/runs/22480216388\n- CI on fix commit: success\n - https://github.com/amitrintzler/skills-and-mcps/actions/runs/22480213346\n- Security / CodeQL: success\n - https://github.com/amitrintzler/skills-and-mcps/actions/runs/22480213364\n- Security / SBOM + Trivy: success\n - https://github.com/amitrintzler/skills-and-mcps/actions/runs/22480213367\n\nHistorical CI failures in this issue body (JSON truncation from shared mutations) were already addressed earlier with runtime state isolation and deterministic claim verification.

[amitrintzler]

Correcting the previous comment formatting (shell escaped markdown).

Resolved the failures reported in this summary.

Root cause

• Daily Security failed because workflow steps searched data/security-reports/*/report.json in the repo workspace, while runtime state was written under default ~/.toolkit.

Fix applied

• Commit: e1cdf00
• Updated workflows to use deterministic state root in Actions: TOOLKIT_HOME=${{ github.workspace }} where repo-backed checks are expected.
• Hardened Daily Security report lookup to avoid hard-fail when report path is empty.

Files changed

• .github/workflows/daily-security.yml
• .github/workflows/catalog-sync.yml
• .github/workflows/ci.yml

Verification

• Daily Security (manual dispatch on fix commit): success
  https://github.com/amitrintzler/skills-and-mcps/actions/runs/22480216388
• CI (push on fix commit): success
  https://github.com/amitrintzler/skills-and-mcps/actions/runs/22480213346
• Security / CodeQL: success
  https://github.com/amitrintzler/skills-and-mcps/actions/runs/22480213364
• Security / SBOM + Trivy: success
  https://github.com/amitrintzler/skills-and-mcps/actions/runs/22480213367

Historical CI failures in this issue body (Unexpected end of JSON input from shared data/* mutation) were previously fixed via runtime-state isolation and deterministic claim checks.

[amitrintzler]

Closing now as repository is clean (no open PRs or active failures). Daily summary automation now auto-closes itself when clean and reopens only if actionable items return.

[amitrintzler]

Closing manually — all failures shown were from earlier today during active development. Current repo state is clean: no open PRs, no active failures.