From 2aa56d7afa9d58e93d84df124bec89fb7a09ddbf Mon Sep 17 00:00:00 2001 From: GitHub CI Date: Mon, 10 Aug 2026 23:14:00 -0700 Subject: [PATCH] =?UTF-8?q?deploy(vera):=20bump=20the=20protoAgent=20base?= =?UTF-8?q?=200.108.0=20=E2=86=92=200.132.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The plugin pins are already current (pr-reviewer v0.24.0 and github v0.3.0 are both the newest tags; protopatch 0.6.1 is the newest npm). The core is the only thing that drifted — 24 minor releases behind, so this is the deliberate base bump the Dockerfile asks for, with `verified_against` moved in step. What's in it for Vera specifically (she's headless — most of the range is console/desktop/Windows work that never reaches her): - #2373 `fix(review): findings contract requires verbatim evidence quotes` (0.126.0) — the CORE half of the grounding fix. pr-reviewer v0.24.0 shipped the plugin half in #26 and has been running without its counterpart since. - #2447 `fix(review): build the published review from blocks, never echo model text` (0.130.0) — the core twin of pr-reviewer#53, still open. - #2297 `feat(workflows): opt-in per-step timeout with graceful degradation` (0.116.0) — the mechanism pr-reviewer#47 needs for the slowest-finder floor (live eval: 57 exhaustions, crossfile slowest in 190 reviews, p90 752s). - #2341 `fix(llm): retry a provider that goes silent mid-stream` (0.120.0) and #2349 `fix(a2a): fail a wedged turn instead of leaving it WORKING forever` (0.121.0) — both bear on the 88.6% completion rate. - #2389 `feat(config): merge-on-boot declarative seeding` (0.126.0) — the fleet-wide fix for our seed-once caveat. It is opt-in via PROTOAGENT_SEED_MERGE, left UNSET here: the seed carries `repos: []` while the live volume holds the 9-repo allowlist, so enabling it is a compose change to make deliberately, not a side effect of this bump. Verified by building this image and booting it on a throwaway config volume: all 8 plugins load, pr-reviewer registers its tools + webhook/dispatch/sweep and mounts both routers, the webhook stays auth-exempt (HMAC-authed) while /api/plugins/pr-reviewer/eval is 200 with the bearer and 401 without and returns the unchanged schema, the seeded a2a identity survives (card serves Vera's description + the pr_review skill, version 0.132.0), SOUL seeds, and clawpatch 0.6.1 runs on node 22. No breaking changes in the range. Watchtower rolls her on merge. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_0178c2V1CuZy2oQKDRG8zYca --- Dockerfile | 2 +- protoagent.bundle.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 1688bbe..0cfc05b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -9,7 +9,7 @@ # protoAgent core forward on the same image roll — core and member bumps are # decoupled. Bump this deliberately (and re-verify), keeping it in step with the # manifest's `verified_against`. Tag format is bare semver (no `v` prefix). -FROM ghcr.io/protolabsai/protoagent:0.108.0 +FROM ghcr.io/protolabsai/protoagent:0.132.0 USER root diff --git a/protoagent.bundle.yaml b/protoagent.bundle.yaml index da477d1..4bb5d2c 100644 --- a/protoagent.bundle.yaml +++ b/protoagent.bundle.yaml @@ -25,7 +25,7 @@ description: >- own work; never posts a blocking verdict against pending CI. # The core version this pin set was last verified against (ADR 0049 rule 2). -verified_against: 0.108.0 +verified_against: 0.132.0 plugins: - { id: workflows, builtin: true } # the recipe engine (code-review panels run through it)