Conversation
|
@codex review |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
Security findingsAdvisory findings (1)ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 9e71474f57
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@codex review |
|
@codex review |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 789fe8d99d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@codex review |
|
Codex Review: Didn't find any major issues. 🎉 Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
🛡️ Codex Security Review · Automatically triggeredSecurity review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
|
@codex review |
|
Codex Review: Didn't find any major issues. Keep it up! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
There was a problem hiding this comment.
🛡️ Codex Security Review · Automatically triggered
Here are some automated security review suggestions for this pull request.
Reviewed commit: 96c303d29d
ℹ️ About Codex security reviews in GitHub
This is an experimental Codex feature. Security reviews are triggered when:
- You comment "@codex security review"
- A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review
Once complete, Codex will leave suggestions, or a comment if no findings are found.
|
@codex review |
🛡️ Codex Security Review · Automatically triggeredSecurity review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
|
Codex Review: Didn't find any major issues. Breezy! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
Superseded by #373 and Kong/volcano-hosting#1371. Acceptance scenarios and language bindings now belong to Hosting, which installs and tests the public package in isolation. SDK-owned signed acceptance bundles are no longer consumed by that design, and publication remains independent. Registry Python 0.13.4 passed the exact quickstart and all 45 scenarios. Replacement: #373 Closing as superseded during the authorized work-in-progress audit. |
1 participant
Hosting needs to test the package customers install without checking out or rewriting SDK runtime source. This adds a standalone acceptance project whose native dependency lock is generated against the exact built package, and publishes a signed
sdk-acceptance.tar.gzbeside the release. Hosting separately verifies the registry package, restores it at the recorded location, and runs the existing behavioral bindings with a frozen install.The build uploads immutable packages and acceptance bundles before a separate read-only job installs or executes freshly resolved dependencies. Signing and publishing use the original artifact IDs after validation passes. The release workflow signs both artifacts before publication and checks a fresh registry download afterward. A separate acceptance workflow produces signed candidate artifacts for coordinated development without publishing a release. Public SDK APIs and canonical scenarios are unchanged.
Validation: native quality suite, package loading and documented quickstart in an empty consumer, acceptance-bundle build, workflow lint, and final PR checks pass. Code and security reviews report no findings on the final commit. Hosting authenticated the exact signed candidates and confirmed frozen installs preserve the generated lock bytes without an SDK source checkout. The canonical 43-scenario inventory is unchanged. Coordinated with Hosting #1243 and CLI #224. Keep draft; merge and normal release publication are separate rollout steps before Hosting switches its default lane.
The final candidate workflow passed immutable upload, isolated validation and signing. Hosting authenticated that exact commit/artifact, replayed its saved selection, and installed it in the source-free container with an unchanged native lock. Package bytes and dependency locks match the previously validated candidates.