Skip to content

deps: bump measure-mirror pin v0.29.0 → v0.32.0 - #25

Merged
bhyi4 merged 1 commit into
mainfrom
pin/measure-v0.32.0
Aug 10, 2026
Merged

deps: bump measure-mirror pin v0.29.0 → v0.32.0#25
bhyi4 merged 1 commit into
mainfrom
pin/measure-v0.32.0

Conversation

@bhyi4

@bhyi4 bhyi4 commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

measure 핀이 3릴리스 뒤처져 있었다(v0.29.0 @ b3b6dec8; 이후 v0.30.0·0.30.1·0.31.0·0.32.0 출시). v0.32.0 @ 21ca2893로 bump.

내용: ㉘ vacuous 실런 both-directions(computed matched-null certificate) + 카탈로그 카운트 72 정합·KO 가드까지 포함하는 릴리스.
변경 범위: measure-mirror 핀 한 줄만. action-mirror·provenance-mirror 핀 불변.

공급망 규율 확인:

  • v0.32.0 태그를 measure-mirror main에 생성(annotated → 커밋 21ca2893). test_pins_are_releases.py가 핀 SHA == 태그 커밋을 GitHub API로 검증 → 이 PR CI에서 통과.
  • CP5(픽스처 지뢰): 이 PR CI가 measure 0.32.0을 실제 설치해 test_server.py 픽스처(kill_threshold 형식)·10툴 임포트를 돌린다. CI 그린 = CP5 통과. (그린 아니면 머지 안 함.)

핀 bump는 규칙10상 사람 게이트 — 대장님 건별 승인(2026-08-10)으로 진행.

🤖 Generated with Claude Code

Pin was 3 releases behind (v0.29.0 @ b3b6dec8; v0.30.0/0.30.1/0.31.0 all
shipped since). Bumps to v0.32.0 @ 21ca2893 — ㉘ vacuous both-directions
on real runs (computed matched-null certificate) + catalog-count sync to
72 with KO guards. action-mirror / provenance-mirror pins unchanged.

v0.32.0 tag created on measure-mirror main (annotated, → 21ca2893);
test_pins_are_releases verifies the pin SHA equals the tag's commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@bhyi4
bhyi4 merged commit d28af18 into main Aug 10, 2026
4 checks passed
@bhyi4
bhyi4 deleted the pin/measure-v0.32.0 branch August 10, 2026 01:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant