chore(deps): batch dependency bumps, babysitter CI fixes, and 0.8.0 changelog notes by ivankuznetsov · Pull Request #1533 · ivankuznetsov/hive

ivankuznetsov · 2026-10-15T09:46:35Z

Summary

Combines the ready dependency PRs into one branch so they share a single CI run instead of one rebase-and-CI cycle each. Each PR head is merged as-is, including the CI fixes the babysitter pushed onto them.

PR	Change
#1523	brakeman 8.0.6 → 8.1.0
#1499	unicode-display_width 3.2.0 → 3.3.0, plus: load the babysitter one-shot adapter with the command; incident-budget headroom
#1459	faraday 2.14.3 → 2.14.4, plus: OpenCode export capture isolation, supervisor descendant-timeout fixture, Turbo history composer alignment, child-supervisor sleep-callback coverage
#1457	bigdecimal 4.1.2 → 4.1.3, plus: tolerate transient SQLite sidecar removal (`runtime_control_plane/database.rb`)
#1528	actions/download-artifact 8.0.1 → 8.0.2 (+ pin contract test)
#1527	actions/upload-artifact 7.0.1 → 7.0.2 (+ pin contract test)
#1526	actions/setup-node 7.0.0 → 7.1.0 (+ release contract pin)
#1460	docker/setup-buildx-action → 4.4.1
#1458	docker/build-push-action 7.3.0 → 7.4.0

Also includes the ## 0.8.0 CHANGELOG notes for #1529 (from #1532, folded in to share this CI run).

Left out: #1524 (sequel 5.109), whose CI fails on coverage and rake test.

Conflict resolutions

test/unit/ci_test_partition_test.rb: takes both new artifact-action pins (upload 7.0.2 from chore(actions)(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 #1527, download 8.0.2 from chore(actions)(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 #1528), matching every workflow file.
Gemfile.lock: bigdecimal 4.1.3 and brakeman 8.1.0 side by side.
Incident budget: all branches raise the aggregate advisory cap to the same 36 s; the test keeps one sample (32.146 s total) and the three duplicate wiki fragments collapse to one.
Babysitter one-shot adapter: chore(deps)(deps): bump unicode-display_width from 3.2.0 to 3.3.0 #1499 and chore(deps)(deps): bump faraday from 2.14.3 to 2.14.4 #1459 fixed the same load-order issue two ways; both changes merge without conflict (top-level require plus the require at construction), and one wiki fragment is kept.

Test plan

Locally: ci_test_partition_test, release_contract_test, attempts/supervisor_test, opencode_agent_lifecycle_test, runtime_control_plane/database_test, commands/babysit_test, e2e/lib/incident_budget_test pass. daemon/child_supervisor_test has one failure that also fails on main (local gem conflict).
CI.

After merge, the individual PRs above get closed with a pointer here.

🤖 Generated with Claude Code

Bumps [faraday](https://github.com/lostisland/faraday) from 2.14.3 to 2.14.4. - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](lostisland/faraday@v2.14.3...v2.14.4) --- updated-dependencies: - dependency-name: faraday dependency-version: 2.14.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

…ysitter/pr-1459 # Conflicts: # web/app/javascript/controllers/project_filter_controller.js # wiki/commands/web.md

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.3.0 to 7.4.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@53b7df9...c3c9e26) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.3.0 to 4.4.1. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@37fe631...f87e599) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [unicode-display_width](https://github.com/janlelis/unicode-display_width) from 3.2.0 to 3.3.0. - [Changelog](https://github.com/janlelis/unicode-display_width/blob/main/CHANGELOG.md) - [Commits](janlelis/unicode-display_width@v3.2.0...v3.3.0) --- updated-dependencies: - dependency-name: unicode-display_width dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [bigdecimal](https://github.com/ruby/bigdecimal) from 4.1.2 to 4.1.3. - [Release notes](https://github.com/ruby/bigdecimal/releases) - [Changelog](https://github.com/ruby/bigdecimal/blob/master/CHANGES.md) - [Commits](ruby/bigdecimal@v4.1.2...v4.1.3) --- updated-dependencies: - dependency-name: bigdecimal dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Keep the advisory aggregate budget above observed hosted-runner scheduling variance while preserving the strict per-scenario signal.

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [brakeman](https://github.com/presidentbeef/brakeman) from 8.0.6 to 8.1.0. - [Release notes](https://github.com/presidentbeef/brakeman/releases) - [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md) - [Commits](presidentbeef/brakeman@v8.0.6...v8.1.0) --- updated-dependencies: - dependency-name: brakeman dependency-version: 8.1.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

# Conflicts: # test/unit/ci_test_partition_test.rb

# Conflicts: # test/e2e/lib/incident_budget_test.rb

# Conflicts: # Gemfile.lock # test/e2e/lib/incident_budget_test.rb

# Conflicts: # wiki/log.d/20260928-babysit-one-shot-adapter-load.md

…batch Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

CHANGELOG.md has no Unreleased accumulator, so the release notes from #1529 go into a 0.8.0 section ahead of the version bump. Release prep keeps the section when it bumps the version. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

dependabot Bot and others added 30 commits September 28, 2026 06:44

fix(ci): isolate OpenCode export capture limit

136d7bb

fix(ci): stabilize supervisor descendant timeout fixture

554fd3a

fix(ci): align composer after Turbo history restore

8ffe78f

fix(ci): cover child supervisor sleep callback

1cc10ba

fix(babysit): load one-shot adapter on demand

ee4a732

Merge commit '289501ba1207ca158b2b711239ac6213d781dc4b' into hive-bab…

b21a4e8

…ysitter/pr-1459 # Conflicts: # web/app/javascript/controllers/project_filter_controller.js # wiki/commands/web.md

fix(ci): restore incident timing headroom

2647cb1

chore(actions): update Buildx action to v4.4.1

4ca3d4e

fix(ci): load babysitter one-shot adapter

ab5238b

fix(ci): restore incident timing headroom

8f2b16b

fix: tolerate transient SQLite sidecar removal

7d043e7

fix(ci): isolate OpenCode export capture limit

08b2f16

fix(ci): stabilize supervisor descendant timeout fixture

f7614a5

fix(ci): restore incident timing headroom

2c88ab9

Keep the advisory aggregate budget above observed hosted-runner scheduling variance while preserving the strict per-scenario signal.

fix(ci): update setup-node release contract pin

6a60e99

test(ci): track upload artifact action pin

6b92da1

test(ci): update download artifact pin contract

e446687

fix(ci): restore incident timing headroom

d5300bf

Merge #1523 into dependency batch

2801f91

Merge #1527 into dependency batch

4c7f494

Merge #1460 into dependency batch

a50b4e9

ivankuznetsov and others added 8 commits October 15, 2026 10:44

Merge #1526 into dependency batch

a6436bf

Merge #1528 into dependency batch

87dd08d

# Conflicts: # test/unit/ci_test_partition_test.rb

Merge #1458 into dependency batch

a50b5f9

# Conflicts: # test/e2e/lib/incident_budget_test.rb

Merge #1499 into dependency batch

4c72329

# Conflicts: # test/e2e/lib/incident_budget_test.rb

Merge #1457 into dependency batch

9abd04e

# Conflicts: # Gemfile.lock # test/e2e/lib/incident_budget_test.rb

Merge #1459 into dependency batch

5a8f852

# Conflicts: # wiki/log.d/20260928-babysit-one-shot-adapter-load.md

docs(wiki): keep one incident-budget headroom note in the dependency …

fc6aab5

…batch Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

ivankuznetsov changed the title ~~chore(deps): batch dependency bumps and babysitter CI fixes~~ chore(deps): batch dependency bumps, babysitter CI fixes, and 0.8.0 changelog notes Oct 15, 2026

ivankuznetsov mentioned this pull request Oct 15, 2026

docs(changelog): stage 0.8.0 notes for headless-only Claude #1532

Closed

1 task done

ivankuznetsov merged commit 3d74ca3 into main Oct 15, 2026
34 checks passed

Navigation Menu

Repository navigation

chore(deps): batch dependency bumps, babysitter CI fixes, and 0.8.0 changelog notes - #1533

chore(deps): batch dependency bumps, babysitter CI fixes, and 0.8.0 changelog notes#1533
ivankuznetsov merged 38 commits into
mainfrom
chore/deps-batch-2026-10-15

ivankuznetsov commented Oct 15, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

ivankuznetsov commented Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Conflict resolutions

Test plan

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

ivankuznetsov commented Oct 15, 2026 •

edited

Loading