12 releases 14 tags

RSS feed

• 0.10.0 784746ce03

  Compare

  0.10.0 Stable

  marvin8 released this 2026-08-31 08:20:51 +00:00 | 0 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:B4Q+9pbWSIqGYTl3Ub/FPrBSqAVd2OkCR13hYRG5wek

  [0.10.0] - 2026-08-31

  • Newly published wuming container images carry a Software Bill of Materials (SBOM) as a signed CycloneDX attestation — cosign verify-attestation --key wuming.pub --insecure-ignore-tlog --type cyclonedx registry.marvin8.zone/marvin8/wuming:latest checks and retrieves it.
  • Images are signed with cosign (managed key, public key published as wuming.pub); the SBOM is attached as a signed attestation, verifiable with cosign verify-attestation.

  Commits

  • 🔀 Merge branch 'feat/sbom-signing' 0406d94
  • 🛡️ remove credential file via EXIT trap in both workflows 60d5033
  • 🔀 Merge branch 'feat/port-ci-publish' into feat/sbom-signing cf81aa1
  • 🚀 port SBOM, signing, and attestation into prod publish 0926321
  • 🔀 Merge branch 'feat/issue-66-cosign' into feat/sbom-signing e0db6b4
  • 🔄 switch cosign signing to v2 for podman-native verification 6024d8a
  • 📝 point SBOM retrieval at the attestation flow 5602c34
  • 🐛 disable signing-config for managed-key cosign calls ac27e84
  • 🔑 add cosign public key for image verification 411d162
  • ✨ sign images and attest SBOMs with cosign 73a19f8
  • 🔀 Merge branch 'feat/issue-65-sbom' into feat/sbom-signing 37dedc9
  • 🔒 write docker creds with restrictive umask and clean up baa65be
  • 🐛 give cosign registry creds and attach as CycloneDX bfdbb1f
  • 🔒 keep registry password out of process argv 21e8c92
  • 🔒 pass registry password via stdin de1f357
  • 👷 publish-container workflow only ever pushes :dev ad04c25
  • 👷 make publish-container a dev-only testing workflow by default 3f61bc8
  • 🛡️ fail on empty checksum file; polish release notes fe60655
  • 📝 use timeless wording for SBOM release note c188b01
  • 📝 clarify release boundary in SBOM note f414607
  • 🛡️ wrap pin verification errors and sanitize log values 7e3cd83
  • 🛡️ harden checker against bad pins and log injection 4938873
  • ✅ harden version checker and clarify SBOM release notes 6bcf4f3
  • 🐛 fix urlopen timeout and correct cosign download sbom command 0d8c104
  • 📝 document SBOM attachment in release notes ed5a207
  • ⬆️ bump pinned syft/cosign to 7-day-aged releases bcb5ac6
  • 🔧 add weekly staleness check for pinned syft/cosign versions 471d736
  • 🔒 use checksum-verified binary downloads instead of curl | sh 493be8c
  • ✨ add SBOM generation and attachment to container images 96ba4df

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• 0.9.1 d66e5453a5

  Compare

  0.9.1 Stable

  marvin8 released this 2026-08-29 06:55:24 +00:00 | 31 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:B4Q+9pbWSIqGYTl3Ub/FPrBSqAVd2OkCR13hYRG5wek

  [0.9.1] - 2026-08-29

  Commits

  • 🔧 Adjust AGENTS.md for retirement of fj 19ed93e
  • ⬆️ bump deps c67554f

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    1 download
• 0.9.0 a04d51f134

  Compare

  0.9.0 Stable

  marvin8 released this 2026-08-18 04:29:45 +00:00 | 35 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:B4Q+9pbWSIqGYTl3Ub/FPrBSqAVd2OkCR13hYRG5wek

  [0.9.0] - 2026-08-18

  • Added a Moonshot (Kimi) backend.
  • Forgejo Actions build from the Containerfile at the referenced ref.
  • Fixed empty DeepSeek reviews — V4 models now get enough output tokens to return findings.
  • Fixed review timeouts — reasoning models now get a longer request timeout.

  Commits

  • ⬆️ bump deps 99f663e
  • 🔀 Merge branch 'feat/issue-61-moonshot-backend' d7843e9
  • 📝 Move Release-Notes bullets into the intro post e427f4e
  • ✅ Add _build_backend factory tests e42ed1f
  • 🐛 Raise backend HTTP timeout to 600s e1bb4d0
  • 🐛 Fix empty DeepSeek responses by raising max_tokens for V4 models a033684
  • 🔧 Use Kimi for code and security in self-review CI 40f7d7a
  • 👷 Build Forgejo action from Containerfile 9d61e2c
  • Revert "🔧 Use Kimi for code and security in self-review CI" 8c2743f
  • 🔧 Use Kimi for code and security in self-review CI 59550fd
  • 📝 Align Release Notes instruction with global AGENTS.md (bullet + prose post) 4ee3783
  • 📝 Fix Release-Notes.md format — short bullet plus follow-on prose post 3d9e625
  • ✨ Add Moonshot (Kimi) backend a4ac92e
  • 🔀 Merge branch 'chore/issue-59-migration-stage2' 2814469
  • 🔥 Remove stale concept.md c8f9a9b
  • 🔧 Make CI zaojun check only runtime dependencies aaf5af8
  • 🚚 Finish stage-2 migration cleanup 9fe7639

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• 0.8.0 d4ef1c6b76

  Compare

  0.8.0 Stable

  marvin8 released this 2026-08-06 04:11:48 +00:00 | 54 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:B4Q+9pbWSIqGYTl3Ub/FPrBSqAVd2OkCR13hYRG5wek

  [0.8.0] - 2026-08-06

  • Repo migrated from Codeberg to forge.marvin8.zone; all source URLs, CI references, and defaults updated.
  • Container images now published to registry.marvin8.zone/marvin8/wuming instead of Codeberg. A new publish-container.yml workflow pushes via OIDC.
  • Agents now receive the PR title and description as context, reducing false positives caused by missing intent.
  • Fixed deduplication hash to include diff-hunk content — comments now re-trigger when the code at a flagged line changes in a subsequent push.

  Commits

  • 🔧 remove missed dockerhub config 9e367dd
  • 🔀 Merge branch 'chore/issue-55-migration-cleanup' 0e789c0
  • 👷 Add container publishing to CI on release events e4d04b3
  • 📝 no longer commit Release-Notes.md after resetting... that should be done with the next set of changes 909b14c
  • :⬆️ bump deps and address vuln in transitive dep pymdown-extensions 24a6ebd
  • 📝 Update Release-Notes.md for migration cleanup 9e3fd9b
  • 🚚 Update source references from codeberg.org to forge.marvin8.zone fbefc7f
  • 🔧 Change weekly-checks runner to suanni 105c5a0
  • 🔧 fishing for the correct way to login with buildah 14a0b7f
  • 🔧 change buildah login command 6f28d15
  • 🔧 trying the build and publish with buildah c15f5ff
  • 🔧 install podman before publish 5446cd3
  • 🔧 re-try publishing container 461e2d2

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• 0.7.0 4f82544487

  Compare

  0.7.0 Stable

  marvin8 released this 2026-07-18 05:45:33 +00:00 | 69 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

  [0.7.0] - 2026-07-18

  • Container images now published to registry.marvin8.zone/marvin8/wuming instead of Codeberg. A new publish-container.yml workflow pushes via OIDC.
  • Agents now receive the PR title and description as context, reducing false positives caused by missing intent.
  • Fixed deduplication hash to include diff-hunk content — comments now re-trigger when the code at a flagged line changes in a subsequent push.

  Commits

  • 📝 Update Improvements.md and Release-Notes.md for review quality changes 6beb36f
  • 🐛 Include diff-hunk content in deduplication hash 1ecab3c
  • ✨ Wire PR title/description into main pipeline with error handling 5b73bea
  • ✨ Thread PR title/description through agent pipeline 9e6e4af
  • ♻️ Refactor get_pr_head_sha into get_pr returning PRInfo dataclass 29160ce
  • 🔒 add contents:read permission and robust OIDC URL handling to publish workflow 14d31a4
  • ⬆️ bump deps 76eadbc
  • 📝 update container image references for registry.marvin8.zone fa83cad
  • 💚 add workflow_dispatch container publish to registry.marvin8.zone via OIDC c60906d
  • 🚚 point action.yml image at registry.marvin8.zone 05f0a51
  • 🚚 replace Codeberg container target with registry.marvin8.zone 9ac5b9a
  • 🏷️ add OCI documentation label to Containerfile 4f0dc9f
  • 📝 reset Release-Notes.md for next release 9009dea

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• 0.6.2 55a0bccdfc

  Compare

  0.6.2 Stable

  marvin8 released this 2026-07-08 03:07:18 +00:00 | 84 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

  [0.6.2] - 2026-07-08

  • New pr_number input fixes PR review on Forgejo Actions runners where the event file is not mounted inside the Docker container
  • Fixed action.yml validation error on Forgejo Actions runner v12.12.0 caused by a github.* expression in the Docker env block
  • WuMing's own CI migrated from Woodpecker to Forgejo Actions

  Commits

  • Merge branch 'feat/issue-49-forgejo-ci-migration' ce879bc
  • 🔥 remove gitmoji allowed-set restriction; delete check_gitmoji hook and tool 96c45f8
  • 🐛 fix: add WUMING_PR_NUMBER input to bypass inaccessible event-file in Docker fb845e3
  • 🐛 fix: add checkout step before uses:./ in pr-review job b120764
  • 🐛 fix: use ./ in pr-review to avoid @main bootstrapping deadlock 6e54854
  • 🐛 fix: pass forgejo_event_path via with: input; revert invalid github.* in action.yml env 2a61516
  • 🐛 fix: decouple check_gitmoji from deleted cliff.toml; inline allowed emoji set 1ec7c7f
  • 📝 docs: update CLAUDE.md for Forgejo Actions CI and Release-Notes.md workflow 3a1aa96
  • ⬆️ refactor: remove git-cliff dependency; delete cliff.toml 4a6505f
  • ♻️ refactor: replace git-cliff with Release-Notes.md changelog generation; add fediverse recipes 4795b5a
  • ✨ feat: add Release-Notes.md and template for taibai fediverse posting cb6b3f1
  • 👷 refactor: add client-side redirect from codeberg.page to wuming.marvin8.zone 7cbfe76
  • 👷 refactor: migrate CI from Woodpecker to Forgejo Actions 1e8a997
  • 🔧 bump deps and broaden gitignore of superpowers folders 12549d7
  • Merge branch 'fix/issue-47-event-path' 916aaaf
  • 🐛 fix: forward github.event_path to Docker container action b491222

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• 0.6.1 3d3c400240

  Compare

  0.6.1 Stable

  marvin8 released this 2026-07-02 08:37:35 +00:00 | 102 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

  [0.6.1] - 2026-07-02

  Documentation

  • 📝 docs: add DRY_RUN, VERBOSE, SUMMARY_COMMENT to reference and guides (126aacf)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• 0.6.0 e58090f171

  Compare

  0.6.0 Stable

  marvin8 released this 2026-07-02 08:19:14 +00:00 | 106 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

  [0.6.0] - 2026-07-02

  Bug Fixes

  • 🐛 fix: dry_run path in _publish_comments logs skipped, not posted (bee4f40)

  Documentation

  • 📝 reformat improvements document. (6ec9966)
  • 📝 docs: document WUMING_DRY_RUN, WUMING_VERBOSE, WUMING_SUMMARY_COMMENT (5da9f58)
  • 📝 mark Configuration & UX section complete (e6358ec)

  Features

  • ✨ config: add _parse_bool_flag and dry_run, verbose, summary_comment flags (a043cc4)
  • ✨ feat: add WUMING_VERBOSE debug logging to backends (4e200b0)
  • ✨ feat: add WUMING_DRY_RUN mode (691c61c)
  • ✨ feat: add WUMING_SUMMARY_COMMENT (d8c013c)

  Testing

  • ✅ fix: address minor review findings — success log, unrecognised severity, tests, README (e307a04)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• 0.5.0 87001f021c

  Compare

  0.5.0 Stable

  marvin8 released this 2026-07-02 03:36:04 +00:00 | 118 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

  [0.5.0] - 2026-07-02

  CI

  • 👷 ci: add action.yml for Forgejo/GitHub Actions support (779b556)

  Documentation

  • 📝 correct docs publishing action pipeline (b4c5602)
  • 📝 docs: add Forgejo Actions deployment guide and update references (2808a26)
  • 📝 docs: clarify docker:// form required for GitHub Actions on github.com (bd2011e)
  • 📝 docs: fix uses: ref — Forgejo Actions requires full Codeberg URL (febf6d7)
  • 📝 docs: fix GitHub Actions example to use env: with WUMING_* vars (9e448b3)

  Features

  • ✨ feat: add CIContext and _detect_ci_context() for Forgejo/GitHub Actions (75d302a)

  Testing

  • ✅ test: add missing coverage for CI context URL defaults (cc74d29)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• 0.4.0 1bebd9eac7

  Compare

  0.4.0 Stable

  marvin8 released this 2026-06-28 09:13:18 +00:00 | 133 commits to main since this release

  Signed by marvin8

  SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

  [0.4.0] - 2026-06-28

  Documentation

  • 📝 docs: document performance and tests agents (572e836)
  • 📝 docs: fix security section order and add coverage-gap overlap note (5faae7b)
  • 📝 docs: fix performance/security section order in agents reference (7556eaa)

  Features

  • ✨ feat: add performance agent (N+1, O(n²), I/O in loops, missing indexes) (d406ad4)
  • ✨ feat: add tests agent (assertion quality, coverage gaps) (947132a)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads