Skip to content

chore(deps): bump fullsend-ai/fullsend/.github/workflows/reusable-prioritize.yml from 0.50.0 to 0.53.0 - #154

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/fullsend-ai/fullsend/dot-github/workflows/reusable-prioritize.yml-0.53.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/fullsend-ai/fullsend/dot-github/workflows/reusable-prioritize.yml-0.53.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps fullsend-ai/fullsend/.github/workflows/reusable-prioritize.yml from 0.50.0 to 0.53.0.

Release notes

Sourced from fullsend-ai/fullsend/.github/workflows/reusable-prioritize.yml's releases.

v0.53.0

Keep your OpenAI API key behind an inference gateway. If you run Fullsend on GitHub with an OpenAI API key (inference.auth: openai-api-key and the FULLSEND_OPENAI_API_KEY repository secret), we now recommend deploying an inference gateway instead (the ADR 0137 route, with agentgateway). The gateway holds the key in a secret store, each repository authenticates with its GitHub Actions OIDC token, and no repository secret holds the key, which otherwise any workflow in a selected repository can read. The trade-off is extra infrastructure to run: a cloud project, a gateway service and its configuration. The key-secret route stays supported for teams that cannot take that on. See Using an inference gateway and the operator guide.

Gateway guides target agentgateway v1.7.0. The operator and user guides now document v1.7.0 as the supported version, with a Security boundary section, the allow-rule pitfalls to avoid, pinning access to repository ids, numbered config versions with rollback, and how to watch the gateway's health and capacity. A See it in practice link points to a working deployment's README in the fullsend-ai org.

Upgrade notes. Nothing changes in the Fullsend workflows or the runner, sandbox and code images in this release. Three narrow behaviour changes to check:

  • Codex (experimental runtime), delegating agents: sub-agents now run as native Codex children, with each child's model taken from subagents (or FULLSEND_CODEX_SUBAGENT_MODEL) and the run's effort. A subagents value that is not an OpenAI model id known to the pinned Codex CLI now fails the run at start-up and names the key; use openai/<id>, or <persona>: ~ to drop a persona (#8836).
  • GitLab, fullsend fetch-review-threads output: the old-file line moves from original_line to old_line, and a discussion on a removed line reports that line in line with side: "left". The fleet agents are updated in step; only custom scripts that read these fields need a change (#8693).
  • fullsend lock refuses to overwrite a lock file it cannot read and tells you what to do; fullsend run is unchanged (#8900).

Jira. Jira work items can now dispatch GitLab agent pipelines (#8924), and fullsend run derives the Jira work-item identity (#8922); the fleet code agent can be started from Jira with /fs-code or the ready-to-code label. fullsend run also reads mint_url from config.yaml / config.base.yaml (#8400).


Changelog

Breaking Changes

  • 75d0b4b8f78cdfd2052e4f072103e3469506ba90: feat(codex)!: bind native child models from subagents and FULLSEND_CODEX_SUBAGENT_MODEL (@​dhshah13)
  • de0bb514e39ffd8ff4636c6d80d244178fc3371a: fix(#8174)!: normalize review-thread position fields across forges (@​fullsend-ai-coder[bot])
  • 4c0c0560d818a35512b32066ef7672a3fde95bc6: fix(codex)!: bind the run's effort for children and count spawns on disk (@​dhshah13)
  • bf361f7c6b5608b9435de51cff711384a1171b3b: fix(lock)!: refuse to overwrite an unreadable lock file (@​Benkapner)

Features

  • d34d195fff3f94d1da183854c489c166ac4b1529: feat(#2264): derive Jira work-item identity in fullsend run (@​fullsend-ai-coder[bot])
  • ac32e429323a5cf279138ef5989115c07e303805: feat(#8919): dispatch Jira work items to GitLab agent pipelines (@​fullsend-ai-coder[bot])
  • 4b80950929546abcb465f0190f2e4a96a1cc9210: feat(codex): run sub-agents as native Codex children (@​dhshah13)

Bug Fixes

  • 0a003492a8124ead7e802270f834e004a1cefb47: fix(#2264): fail closed on Jira dispatch claim when channels disagree (@​fullsend-ai-coder[bot])
  • 345763cd880a6c1c17c78b4cdeac589f853bd1ae: fix(#2264): resolve Jira work-item identity for telemetry and update docs (@​fullsend-ai-coder[bot])
  • ac5359a870a8d89a6ec5a8ad0a76c9f0804293f6: fix(#8173): verify review-thread roles only when authoritative (@​fullsend-ai-coder[bot])
  • 3d721198a9227ef887f38dd29d48496baa90af1d: fix(#8174): address review feedback on PR #8693 (@​fullsend-ai-coder[bot])
  • 1a2084b19998de26949af94ec1d2729363b3290c: fix(#8192): fail-closed mint_url precedence for local runs and reconcile-status (@​mfrancisc)
  • 4fcebc0a044dface2e269de4f85e4e30009e1185: fix(#8192): honor config.base.yaml-only mint_url in status notifier (@​mfrancisc)
  • bd18203789135beaf16192792c3e65fa368413eb: fix(#8192): narrow mint_url OIDC downgrade to genuine local runs (@​mfrancisc)
  • 295b10bb9167e9775359d521ec903752cc0d15e8: fix(#8192): read mint_url from config.yaml/config.base.yaml in fullsend run (@​mfrancisc)
  • 29713b072ee30d153654dec13dbaa3067a7db480: fix(#8192): restore statusForgeClient arg dropped by merge conflict (@​mfrancisc)
  • 0a843580d8bfc333c2aa586258019fe6ef785294: fix(#8887): keep terminal-phase sandbox creation diagnostics (@​fullsend-ai-coder[bot])
  • cf1196c5d2ac208eaa2d49f295abfa2887fee6fd: fix(#8948): mask the agentgateway version in the frozen-path diff (@​waynesun09)
  • 55e3e7580b5dc072543aae1be4e91fdd257ad19a: fix(cli): resolve mint_url via layered precedence in cancellation finalizer (@​mfrancisc)
  • a58293173348798889d3bba3c25d4b60e122bd80: fix(codex): count a child whose rollout head is empty or cut once (@​dhshah13)
  • 6a26a79f36ddf1afe8a69b36e25fe695aa5c103b: fix(codex): give the skip reason for a subagents key a skipped persona owns (@​dhshah13)
  • 8a079a02705155eb205f252924cf49b815a78fc8: fix(codex): keep children off a gateway parent and fail on a lost spawn (@​dhshah13)
  • 44d182ce56a0422b1360afd7e16972047b290670: fix(codex): keep explore children apart from default in transcript names (@​dhshah13)
  • 144ad6460a9977f143a3ee0c4deb479c228153a4: fix(codex): name a reserved or unregistered subagents key plainly (@​dhshah13)
  • af43b0b68881476eb4c4aeea6636aa7cd0874691: fix(codex): read a session_meta line cut before its parent by its name (@​dhshah13)
  • b845a4cd034b13c99b21e9e077e0e608c8e7a1ff: fix(codex): say spawn where failed spawn items count (@​dhshah13)
  • 5e0932d780adefe450fc2928d375e5a17f18b5ab: fix(deps): update module github.com/cucumber/messages/go/v34 to v34.2.1 (@​renovate-fullsend[bot])
  • 1c10a417db3c37ded575fb642b46ad753eff9ed5: fix: address review feedback on PR #8943 (@​fullsend-ai-coder[bot])

Agents changes

... (truncated)

Commits
  • 25811c9 Merge pull request #8951 from fullsend-ai/agent/8948-agentgateway-v1-7-0
  • cf1196c fix(#8948): mask the agentgateway version in the frozen-path diff
  • af9103a Merge pull request #8953 from fullsend-ai/docs-openai-key-gateway-recommendation
  • 5d17400 Merge pull request #8945 from fullsend-ai/docs-gateway-dogfood-reference
  • 7be5350 docs(inference): recommend an inference gateway for OpenAI API key users on G...
  • 93e9b64 docs(gateway): move gateway guides to agentgateway v1.7.0, link org reference
  • 98c1e71 chore(#8948): move the durable E2E inference gateway to agentgateway v1.7.0
  • b4487da Merge pull request #8929 from fullsend-ai/agent/8887-terminal-phase-logs
  • e82eda3 chore: update fullsend per-repo installation
  • 5a171e0 Merge pull request #8943 from fullsend-ai/agent/8920-jira-result-docs
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

…oritize.yml

Bumps [fullsend-ai/fullsend/.github/workflows/reusable-prioritize.yml](https://github.com/fullsend-ai/fullsend) from 0.50.0 to 0.53.0.
- [Release notes](https://github.com/fullsend-ai/fullsend/releases)
- [Commits](fullsend-ai/fullsend@5163a55...25811c9)

---
updated-dependencies:
- dependency-name: fullsend-ai/fullsend/.github/workflows/reusable-prioritize.yml
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 2, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 2, 2026 17:36

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated dependency approval after static and live review-state validation.
Dependency: fullsend-ai/fullsend/.github/workflows/reusable-prioritize.yml@0.53.0
Dependency review result: success
Dependency review conclusion: success
Risk: medium
Release age: 71 hours (minimum: 24 hours)

@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown

Standardized Dependabot Review Summary

Evidence Value
Dependency review conclusion success
Risk medium
Dependency fullsend-ai/fullsend/.github/workflows/reusable-prioritize.yml
Version 0.53.0
Release age 71 hours
Workflow logs View run

Eligible for automated approval pending live review-state validation

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants