[jan-kubica]

Migrates shared tooling from 2.1.3 to 3.2.0 with the matched plugin 0.7.0, Oxlint 1.89.0 and tsgolint 7.0.2005. Regenerates cloud setup and dependency policy, adopting safe snapshot replacement and delegated workflow validation. The shared workflow reference now includes bounded quarantine metadata retries.

Validation: the canonical toolchain check passes. CI runs the matched lint/type tooling, native and WASM build/test matrix, and packaging checks. No TypeScript compatibility exception is needed.

Canonical migration notes.

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 8 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration

• Source mode: Auto
• Repository: stella/stdnum
• Branch: chore/shared-toolchain-3-20261028
• File: .coderabbit.yaml
• Commit: e70c008
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: acf9faf7-0476-433c-a39e-86302217dfd3

Commits

Reviewing files that changed from the base of the PR and between 48168f8 and e70c008.

Files ignored due to path filters: 1

• bun.lock is excluded by !**/*.lock

Files selected for processing: 12

• .changeset/toolchain-3.md
• .claude/settings.json
• .github/workflows/autofix.yml
• .github/workflows/ci.yml
• .github/workflows/cla.yml
• .github/workflows/quarantine-policy.yml
• .github/workflows/quarantine-prune.yml
• .github/workflows/release-policy.yml
• .github/workflows/release-pr.yml
• .github/workflows/release.yml
• bunfig.toml
• package.json

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 4 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/quarantine-prune.yml

Package	Version	License	Issue Type
stella/.github/.github/workflows/quarantine-prune.yml	ba5f7da76aededf6f22814de93c72a49843fcc8e	Null	Unknown License

.github/workflows/release.yml

Package	Version	License	Issue Type
stella/.github/.github/actions/pypi-publish-hardened	ba5f7da76aededf6f22814de93c72a49843fcc8e	Null	Unknown License
stella/.github/.github/actions/pypi-publish-hardened/verify	ba5f7da76aededf6f22814de93c72a49843fcc8e	Null	Unknown License
stella/.github/.github/workflows/npm-version-finalize.yml	ba5f7da76aededf6f22814de93c72a49843fcc8e	Null	Unknown License

Allowed Licenses:

MIT, Apache-2.0, Apache-2.0 WITH LLVM-exception, BSD-2-Clause, BSD-3-Clause, ISC, 0BSD, BlueOak-1.0.0, Unlicense, CC0-1.0, CC-BY-4.0, MIT-0, MPL-2.0, Python-2.0, Zlib, Unicode-3.0

Excluded from license check:

pkg:cargo/libfuzzer-sys

OpenSSF Scorecard

Package	Version	Score	Details
actions/stella/.github/.github/workflows/quarantine-prune.yml	ba5f7da76aededf6f22814de93c72a49843fcc8e	Unknown	Unknown
actions/stella/.github/.github/actions/pypi-publish-hardened	ba5f7da76aededf6f22814de93c72a49843fcc8e	Unknown	Unknown
actions/stella/.github/.github/actions/pypi-publish-hardened/verify	ba5f7da76aededf6f22814de93c72a49843fcc8e	Unknown	Unknown
actions/stella/.github/.github/workflows/npm-version-finalize.yml	ba5f7da76aededf6f22814de93c72a49843fcc8e	Unknown	Unknown
npm/@stll/oxlint-config	3.2.0	Unknown	Unknown
npm/@stll/oxlint-plugin	0.7.0	Unknown	Unknown
npm/oxlint	1.89.0	Unknown	Unknown
npm/oxlint-tsgolint	7.0.2005	Unknown	Unknown

Scanned Files

• .github/workflows/quarantine-prune.yml
• .github/workflows/release.yml
• package.json