Skip to content

1.2.1, 3/4: issue forms, PR template, the pyz rule and a social preview - #64

Merged
DurthVadr merged 3 commits into
mainfrom
launch/3-github
Oct 11, 2026
Merged

DurthVadr merged 3 commits into
mainfrom
launch/3-github

Conversation

@DurthVadr

@DurthVadr DurthVadr commented Oct 11, 2026 •

Copy link
Copy Markdown
Member

Stacked: 3 of 4. Base launch/2-readme.

  • .github/ISSUE_TEMPLATE/: Bug report (shim version, client and version, OS, shim doctor <client> --json) and Detection report (missed or false positive, entity, synthetic example, expected vs seen; "a value shim missed is the report we value most"). Both open with "do not paste a real secret or real personal data". config.yml turns blank issues off and sends vulnerabilities to the private advisory, as SECURITY.md says. Both forms use the existing bug label (there is no detection label).

  • .github/pull_request_template.md: gate result, docs, synthetic values, and "shim.pyz is not rebuilt".

  • CONTRIBUTING.md: where and how to open an issue, and the rule that plugins/shim-cli/bin/shim.pyz is rebuilt only in a release commit, because the marketplace installs from main. One line of the same rule in AGENTS.md.

  • docs/assets/social-preview.png (1280x640). The one on GitHub says "shim Guard" and "no network". Uploading it is a setting (Settings → Social preview).

  • CI job archive-follows-version: a pull request that changes shim.pyz without changing the version in pyproject.toml fails. Checked against history: it fails on f2884b8, the commit that rebuilt the archive on main at 1.1.2, and passes the release PR and the docs PRs.

Done in repository settings with gh (this permission was for this task only):

  • About is now "Local traffic visibility and privacy controls for coding agents. See what Claude Code, Codex and Copilot send to the model; mask secrets and personal data where the client allows it." (your wording). Note: STYLE.md §9 asks for a noun phrase under 110 characters that matches the package description; this one is 175.
  • Topics gdpr and kvkk removed: next to privacy they read as a compliance claim, which STYLE.md §3 rules out. security stays.

🤖 Generated with Claude Code

@DurthVadr

Copy link
Copy Markdown
Member Author

Local gate on this head: green, 3,383 tests.

DurthVadr and others added 2 commits October 11, 2026 23:14
…e rebuilds the plugin archive

A bug report and a detection report, both opening with a warning to paste
synthetic values only; security reports go to a private advisory. CONTRIBUTING
says where issues go and why shim.pyz is rebuilt only in a release commit;
AGENTS.md carries the same rule.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The one set on GitHub still says shim Guard and no network, from before the
rename and shim watch. Uploading it is a repository setting.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…rsion change

It would have caught the 1.1.2 to 1.2.0 drift: f2884b8 rebuilt shim.pyz on main
with the version still 1.1.2, and the marketplace served that code to plugin
users while PyPI served 1.1.2.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@DurthVadr
DurthVadr changed the base branch from launch/2-readme to main October 11, 2026 22:36
@DurthVadr
DurthVadr merged commit e4182c8 into main Oct 11, 2026
9 checks passed
@DurthVadr
DurthVadr deleted the launch/3-github branch October 11, 2026 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant