Install Node maintenance for the website by omry · Pull Request #74 · omry/omegaflow

omry · 2026-10-16T19:09:41Z

Use the standalone Node maintenance workflows at reviewed commit 241d646f6b83d17aeee2bb97a8c1e1e788eb6099 and integration version 6. Replace the retired Docusaurus configuration with .github/node-maintenance.json, forward manual security/upgrades selection, and grant only the audit job issue-write permission.

Declare Node 24 and pnpm 11.21.0 explicitly, apply the standalone ten-day cooldown policy, and validate proposals through the schema check and production website build. Schedule security checks weekly and routine upgrades quarterly. Keep dependency versions, the lockfile, security overrides, and existing core-js approval unchanged. Read deployment Node from the website declaration.

Document installation prerequisites, loud configuration failures, built-in-token publication, manual audits, and the post-merge security audit. This PR installs setup; dependency repair is left to the GitHub Action.

Validation: frozen install under Node 24.14.0/pnpm 11.21.0, schema verification and production build, merged runtime configuration/caller and installed-toolchain preflight all passed. No lockfile changes.

omry · 2026-10-16T19:12:15Z

PR-cycle state — maintained automatically. Do not edit by hand.

Mechanical PR-cycle state (JSON)

{
  "approval": {
    "candidate_revision_fingerprint": "sha256:b3548f182be915064bc65260d3eb48850252b5c09ecf8294253e3d55739842b7",
    "evidence": {
      "attestations": [],
      "candidate_revision_fingerprint": "sha256:b3548f182be915064bc65260d3eb48850252b5c09ecf8294253e3d55739842b7",
      "check_conclusions": [
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 118229181149
        },
        {
          "conclusion": "SUCCESS",
          "name": "Package build",
          "run_id": 118229205467
        },
        {
          "conclusion": "SUCCESS",
          "name": "Python tests",
          "run_id": 118229205420
        },
        {
          "conclusion": "SUCCESS",
          "name": "Recording integration",
          "run_id": 118229205030
        },
        {
          "conclusion": "SUCCESS",
          "name": "Website docs",
          "run_id": 118229205325
        }
      ],
      "delivery_deferral_ledger_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
      "finding_dispositions_digest": "sha256:cd8ce000d0915efe8c707fcd02702b6143bf62a414429834e82075a22dcc7e59",
      "operation_identity": "sha256:ad82abafb8893529169affd1e3501f2be0b3f7043ecbea3265acc34355005144",
      "review_request": {
        "body_digest": "sha256:468134ea221be8342e310e55364f1f0e51d5f09e075aadc0c9a4a6caa5524778",
        "id": 6274235677
      },
      "review_result": {
        "body_digest": "sha256:9c916155c74a50354e884f65448d11cf02b5b7dc1d3796b8db207c46c58d1d83",
        "id": 6274274582
      }
    },
    "evidence_fingerprint": "sha256:85d863c7163ca76ed95db3860934292a7abbc945f6f2f3045618cd388febc866",
    "head_sha": "67556b140393ac9c82499c2e8aaa135e78af8d5a",
    "operation_identity": "sha256:ad82abafb8893529169affd1e3501f2be0b3f7043ecbea3265acc34355005144",
    "review_request_id": 6274235677,
    "review_result_id": 6274274582,
    "status": "approved-evidence-recorded"
  },
  "candidate_revision_fingerprint": "sha256:b3548f182be915064bc65260d3eb48850252b5c09ecf8294253e3d55739842b7",
  "check_conclusions": [
    {
      "conclusion": "SUCCESS",
      "name": "Gitar",
      "run_id": 118229181149
    },
    {
      "conclusion": "SUCCESS",
      "name": "Package build",
      "run_id": 118229205467
    },
    {
      "conclusion": "SUCCESS",
      "name": "Python tests",
      "run_id": 118229205420
    },
    {
      "conclusion": "SUCCESS",
      "name": "Recording integration",
      "run_id": 118229205030
    },
    {
      "conclusion": "SUCCESS",
      "name": "Website docs",
      "run_id": 118229205325
    }
  ],
  "check_observations": [
    {
      "checks": [
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 118229181149,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/runs/118229181149"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Package build",
          "run_id": 118229205467,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/39301970707/job/118229205467"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Python tests",
          "run_id": 118229205420,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/39301970707/job/118229205420"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Recording integration",
          "run_id": 118229205030,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/39301970707/job/118229205030"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Website docs",
          "run_id": 118229205325,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/39301970707/job/118229205325"
        }
      ],
      "head_sha": "67556b140393ac9c82499c2e8aaa135e78af8d5a",
      "id": "sha256:4192f0b8b2f728bdb156ac49758b199adfb7cee475e515bbfd689ecca45238e4",
      "required_checks": [
        "Gitar",
        "Package build",
        "Python tests",
        "Recording integration",
        "Website docs"
      ],
      "status": "success"
    },
    {
      "checks": [
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 117148311820,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/runs/117148311820"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Package build",
          "run_id": 117148293350,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/38952850800/job/117148293350"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Python tests",
          "run_id": 117148292871,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/38952850800/job/117148292871"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Recording integration",
          "run_id": 117148293209,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/38952850800/job/117148293209"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Website docs",
          "run_id": 117148293231,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/38952850800/job/117148293231"
        }
      ],
      "head_sha": "e872a97c78f8534ee7e07494bcab5d45387dad3f",
      "id": "sha256:474c1717c175a6ac9713f150250dfd4f2a5434a0c62ea0be45c2f443b3e26afc",
      "required_checks": [
        "Gitar",
        "Package build",
        "Python tests",
        "Recording integration",
        "Website docs"
      ],
      "status": "success"
    },
    {
      "checks": [
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 118225821011,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/runs/118225821011"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Package build",
          "run_id": 118225844727,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/39300996200/job/118225844727"
        },
        {
          "name": "Python tests",
          "run_id": 118225844114,
          "run_status": "in_progress",
          "status": "pending",
          "url": "https://github.com/omry/omegaflow/actions/runs/39300996200/job/118225844114"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Recording integration",
          "run_id": 118225844630,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/39300996200/job/118225844630"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Website docs",
          "run_id": 118225844449,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/39300996200/job/118225844449"
        }
      ],
      "head_sha": "a8b5b1480834ed9a4023d27ae9ab61fa027ca259",
      "id": "sha256:84d5962bf7294258533ed21ad5f3b42cb08f58961e07e410c729a91af0043040",
      "required_checks": [
        "Gitar",
        "Package build",
        "Python tests",
        "Recording integration",
        "Website docs"
      ],
      "status": "pending"
    },
    {
      "checks": [
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 117194013735,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/runs/117194013735"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Package build",
          "run_id": 117193976889,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/38966446293/job/117193976889"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Python tests",
          "run_id": 117193976666,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/38966446293/job/117193976666"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Recording integration",
          "run_id": 117193976905,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/38966446293/job/117193976905"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Website docs",
          "run_id": 117193976810,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/omegaflow/actions/runs/38966446293/job/117193976810"
        }
      ],
      "head_sha": "08cbbb1fa98ccd6f9e9e1204508333c0430f3f31",
      "id": "sha256:f0a0d1530abc018851752d4c2c7e6ade8649b64a5de17b6abf8e962bd3787cd4",
      "required_checks": [
        "Gitar",
        "Package build",
        "Python tests",
        "Recording integration",
        "Website docs"
      ],
      "status": "success"
    }
  ],
  "delivery_deferral_ledger_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
  "delivery_deferrals": [],
  "findings": [
    {
      "classification": "current-slice-defect",
      "evidence": [
        "https://github.com/omry/omegaflow/pull/74#discussion_r4299315508",
        "https://github.com/omry/omegaflow/pull/74#discussion_r4317305326"
      ],
      "id": "gitar-inline-4299315508",
      "invariant": "The validation package script must work when pnpm is installed directly without Corepack.",
      "proposed_fix_paths": [
        "website/package.json"
      ],
      "rationale": "The script already runs under the pinned pnpm but redundantly invokes Corepack for its nested build. Replace that invocation with pnpm run build.",
      "source_url": "https://github.com/omry/omegaflow/pull/74#discussion_r4299315508",
      "status": "fixed",
      "thread_id": "PRRT_kwDOTOFvvM6tYK1N"
    }
  ],
  "pr": {
    "base_ref": "main",
    "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
    "body_digest": "sha256:ccbe746609c52a412baa50bcdca130e24b81ef2c89dc04c5603d1191f45ff54e",
    "diff_digest": "sha256:01b119dbb1caa753233eebcb7528c0a465a3348dfa3459f092d33bb2ce335814",
    "head_ref": "pr74",
    "head_sha": "67556b140393ac9c82499c2e8aaa135e78af8d5a",
    "pr": 74,
    "repository": "omry/omegaflow",
    "scope_authority": [],
    "title_digest": "sha256:9e0bc53010b4f782db63853c0146347f4840f40b7630e87e2d5683c7ebbdb150"
  },
  "record_version": 15,
  "review_observations": [],
  "review_requests": [
    {
      "base_established_at": "2026-10-16T19:09:41Z",
      "base_ref": "main",
      "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
      "body_digest": "sha256:f0d84cac48e3d56b67e4a0c1343ada72bd847c8fb8086f4db08982f453d66fc6",
      "created_at": "2026-10-16T19:13:48Z",
      "head_sha": "e872a97c78f8534ee7e07494bcab5d45387dad3f",
      "id": 6222867282,
      "kind": "regular-review"
    },
    {
      "base_established_at": "2026-10-16T19:09:41Z",
      "base_ref": "main",
      "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
      "body_digest": "sha256:f85444f4a6f7ad3fe5fd1129de69425c7704ff160382e36d62afe9b13ac18a65",
      "created_at": "2026-10-16T21:07:08Z",
      "head_sha": "08cbbb1fa98ccd6f9e9e1204508333c0430f3f31",
      "id": 6224707039,
      "kind": "regular-review"
    },
    {
      "base_established_at": "2026-10-16T19:09:41Z",
      "base_ref": "main",
      "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
      "body_digest": "sha256:770c84adaded7a7d648b98144de8b226b739e935e5139f9e337444301ef9e755",
      "created_at": "2026-10-19T18:16:35Z",
      "head_sha": "a8b5b1480834ed9a4023d27ae9ab61fa027ca259",
      "id": 6274100628,
      "kind": "regular-review"
    },
    {
      "base_established_at": "2026-10-16T19:09:41Z",
      "base_ref": "main",
      "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
      "body_digest": "sha256:468134ea221be8342e310e55364f1f0e51d5f09e075aadc0c9a4a6caa5524778",
      "created_at": "2026-10-19T18:23:54Z",
      "head_sha": "67556b140393ac9c82499c2e8aaa135e78af8d5a",
      "id": 6274235677,
      "kind": "regular-review"
    }
  ],
  "review_results": [
    {
      "base_ref": "main",
      "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
      "body_digest": "sha256:780142c28a11b8c3af791ef06e4aefeed67f6ca0df25ba46a4ac54622515c7f4",
      "commit_id": "e872a97c78f8534ee7e07494bcab5d45387dad3f",
      "id": 6222904321,
      "inline_message_ids": [],
      "request_comment_id": 6222867282,
      "result_kind": "clean",
      "status": "result",
      "submitted_at": "2026-10-16T19:16:06Z",
      "unresolved_thread_ids": []
    },
    {
      "base_ref": "main",
      "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
      "body_digest": "sha256:377d0b0cc2e2995bc828f486d6024d09fdd5915343167e67835b856ec920061d",
      "commit_id": "08cbbb1fa98ccd6f9e9e1204508333c0430f3f31",
      "id": 6224740657,
      "inline_message_ids": [],
      "request_comment_id": 6224707039,
      "result_kind": "clean",
      "status": "result",
      "submitted_at": "2026-10-16T21:09:23Z",
      "unresolved_thread_ids": [
        "PRRT_kwDOTOFvvM6tYK1N"
      ]
    },
    {
      "base_ref": "main",
      "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
      "body_digest": "sha256:5ac53e46d6ee50269846c731850ca83212f28e5342999d3f25fbe62bf059bf1f",
      "commit_id": "a8b5b1480834ed9a4023d27ae9ab61fa027ca259",
      "id": 6274146956,
      "inline_message_ids": [],
      "request_comment_id": 6274100628,
      "result_kind": "clean",
      "status": "result",
      "submitted_at": "2026-10-19T18:19:05Z",
      "unresolved_thread_ids": [
        "PRRT_kwDOTOFvvM6tYK1N"
      ]
    },
    {
      "base_ref": "main",
      "base_sha": "e10e61614f25c06da12fba2610803126390be1e7",
      "body_digest": "sha256:9c916155c74a50354e884f65448d11cf02b5b7dc1d3796b8db207c46c58d1d83",
      "commit_id": "67556b140393ac9c82499c2e8aaa135e78af8d5a",
      "id": 6274274582,
      "inline_message_ids": [],
      "request_comment_id": 6274235677,
      "result_kind": "clean",
      "status": "result",
      "submitted_at": "2026-10-19T18:25:59Z",
      "unresolved_thread_ids": []
    }
  ],
  "revision_fingerprint": "sha256:b3548f182be915064bc65260d3eb48850252b5c09ecf8294253e3d55739842b7",
  "rounds": [
    {
      "applied_fix_paths": [],
      "disposition_changes": [],
      "effective_diff_digest": "sha256:d86c8414ba3513558c692b41d48a75bf465e7bcfa15a4fa6a6b1ad55ee1aa65b",
      "finding_ids": [],
      "invariants": [
        "Shared workflows pinned to reviewed revision with matching caller/config schedule",
        "Project-selected supported Node22 and pnpm11.21.0; unchanged dependency lock and preserved security policy",
        "Selected script and website CI preserve schema checks and production build",
        "Only authorized website migration paths changed; no product, private workflow dependency, merge, deployment or permission mutation"
      ],
      "outcome": "clean",
      "proposed_fix_paths": [],
      "resulting_head": "e872a97c78f8534ee7e07494bcab5d45387dad3f",
      "review_observation_id": null,
      "review_request_id": 6222867282,
      "review_result_id": 6222904321,
      "reviewed_head": "e872a97c78f8534ee7e07494bcab5d45387dad3f",
      "root_cause": "No current-slice migration defects found by complete local or regular remote review; all local and hosted checks passed.",
      "round": 1,
      "unresolved_current_slice_findings": 0,
      "unresolved_design_blockers": 0
    },
    {
      "applied_fix_paths": [],
      "disposition_changes": [],
      "effective_diff_digest": "sha256:fb9f59321ef8b99498f5737a91d91f749f910dc27222370f3d6cb21f319d2a17",
      "finding_ids": [],
      "invariants": [
        "Project declarations and actual runtime agree on Node24 and pnpm11.21.0",
        "Shared callers use reviewed9135994 revision and matching annual schedule",
        "Unchanged dependency lock, security overrides and core-js approval; ten-day project policy retained",
        "Schema-doc checks and production build pass; existing deployment triggers preserved",
        "Only authorized website migration paths changed; no merge or deployment"
      ],
      "outcome": "clean",
      "proposed_fix_paths": [],
      "resulting_head": "08cbbb1fa98ccd6f9e9e1204508333c0430f3f31",
      "review_observation_id": null,
      "review_request_id": 6224707039,
      "review_result_id": 6224740657,
      "reviewed_head": "08cbbb1fa98ccd6f9e9e1204508333c0430f3f31",
      "root_cause": "No current-slice defects in the published Node24 migration; complete local validation, all applicable hosted checks and fresh regular review are clean.",
      "round": 2,
      "unresolved_current_slice_findings": 0,
      "unresolved_design_blockers": 0
    },
    {
      "applied_fix_paths": [
        "website/package.json"
      ],
      "disposition_changes": [
        "gitar-inline-4299315508"
      ],
      "effective_diff_digest": "sha256:01b119dbb1caa753233eebcb7528c0a465a3348dfa3459f092d33bb2ce335814",
      "finding_ids": [
        "gitar-inline-4299315508"
      ],
      "invariants": [
        "The validation script must work with directly installed pnpm without Corepack."
      ],
      "outcome": "corrected-head-needs-review",
      "proposed_fix_paths": [
        "website/package.json"
      ],
      "resulting_head": "67556b140393ac9c82499c2e8aaa135e78af8d5a",
      "review_observation_id": null,
      "review_request_id": 6274100628,
      "review_result_id": 6274146956,
      "reviewed_head": "a8b5b1480834ed9a4023d27ae9ab61fa027ca259",
      "root_cause": "An older unresolved review finding remained valid: the nested build redundantly invoked Corepack. It now invokes pnpm, verified with Corepack command blocked.",
      "round": 3,
      "unresolved_current_slice_findings": 0,
      "unresolved_design_blockers": 0
    },
    {
      "applied_fix_paths": [],
      "disposition_changes": [],
      "effective_diff_digest": "sha256:01b119dbb1caa753233eebcb7528c0a465a3348dfa3459f092d33bb2ce335814",
      "finding_ids": [],
      "invariants": [
        "The validation script must work with directly installed pnpm without Corepack."
      ],
      "outcome": "clean",
      "proposed_fix_paths": [],
      "resulting_head": "67556b140393ac9c82499c2e8aaa135e78af8d5a",
      "review_observation_id": null,
      "review_request_id": 6274235677,
      "review_result_id": 6274274582,
      "reviewed_head": "67556b140393ac9c82499c2e8aaa135e78af8d5a",
      "root_cause": "Final exact-head Codex review clean, all five hosted checks successful, local frozen install, runtime preflight and production validation pass.",
      "round": 4,
      "unresolved_current_slice_findings": 0,
      "unresolved_design_blockers": 0
    }
  ],
  "schema": "awd:swe:pr-cycle-state",
  "version": 2
}

chatgpt-codex-connector · 2026-10-16T19:13:14Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-19T18:26:00.404308Z	`67556b1`	Manual request
🔒 Security Review	✅ Completed 2026-10-16T19:15:56.963097Z	`e872a97`	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

omry · 2026-10-16T19:13:48Z

@codex, regular review e872a97

chatgpt-codex-connector · 2026-10-16T19:16:06Z

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: e872a97c78

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

omry · 2026-10-16T21:07:08Z

@codex, regular review 08cbbb1

chatgpt-codex-connector · 2026-10-16T21:09:23Z

Codex Review: Didn't find any major issues. 🎉

Reviewed commit: 08cbbb1fa9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

omry · 2026-10-19T18:16:35Z

@codex, regular review a8b5b14

chatgpt-codex-connector · 2026-10-19T18:19:05Z

Codex Review: Didn't find any major issues. More of your lovely PRs please.

Reviewed commit: a8b5b14808

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Use the standalone Node maintenance workflows at reviewed commit 241d646f6b83d17aeee2bb97a8c1e1e788eb6099 and integration version 6. Replace the retired Docusaurus configuration with .github/node-maintenance.json, forward manual security/upgrades selection, and grant only the audit job issue-write permission. Declare Node 24 and pnpm 11.21.0 explicitly, apply the standalone ten-day cooldown policy, and validate proposals through the schema check and production website build. Schedule security checks weekly and routine upgrades quarterly. Keep dependency versions, the lockfile, security overrides, and existing core-js approval unchanged. Read deployment Node from the website declaration. Document installation prerequisites, loud configuration failures, built-in-token publication, manual audits, and the post-merge security audit. This PR installs setup; dependency repair is left to the GitHub Action. Validation: frozen install under Node 24.14.0/pnpm 11.21.0, schema verification and production build, merged runtime configuration/caller and installed-toolchain preflight all passed. No lockfile changes.

gitar-bot · 2026-10-19T18:23:19Z

Code Review ✅ Approved 1 closed / 1 findings

🔴 High risk · The new scheduled audit grants its publishing job repository and pull-request write access, so a mis-scoped workflow could create or update unintended dependency PRs.

Installs the standalone Node maintenance workflows for the website with Node 24 and pnpm 11.21.0 declared explicitly, a ten-day cooldown, and weekly security and quarterly upgrade schedules. The Corepack requirement for the check script, which engines: >=24 did not guarantee, has been addressed. No open issues found.

✅ 1 closed

✅ Edge Case: check script needs Corepack, which engines: >=24 doesn't guarantee

📄 website/package.json:10 📄 website/package.json:19-21
The check script calls corepack pnpm run build from inside a pnpm run. Node.js stopped bundling Corepack starting with v25, but engines.node is >=24, which still allows Node 25+. On those versions, and on any machine or runner that installed pnpm without Corepack (for example CI uses pnpm/action-setup), pnpm run check fails with corepack: command not found even though pnpm is already running. Calling pnpm run build directly avoids that dependency, because the outer pnpm is already the pinned version. Pinning engines to 24.x would also work.

Verification

Rules No rules evaluated

Functional validation Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

`Auto-apply`	`Compact`
`gitar auto-apply:on`	`gitar display:verbose`

_{Was this helpful? React with 👍 / 👎 | Powered by Gitar — free for open source}

omry · 2026-10-19T18:23:54Z

@codex, regular review 67556b1

chatgpt-codex-connector · 2026-10-19T18:25:59Z

Codex Review: Didn't find any major issues. Swish!

Reviewed commit: 67556b1403

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

omry marked this pull request as ready for review October 16, 2026 19:13

omry added the approved PR reviewed and approved label Oct 16, 2026

omry force-pushed the pr74 branch from e872a97 to 08cbbb1 Compare October 16, 2026 21:01

gitar-bot Bot reviewed Oct 16, 2026

View reviewed changes

Comment thread website/package.json Outdated

omry removed the approved PR reviewed and approved label Oct 16, 2026

omry added the approved PR reviewed and approved label Oct 16, 2026

omry changed the title ~~Adopt shared Docusaurus maintenance for the website~~ Install Node maintenance for the website Oct 19, 2026

omry removed the approved PR reviewed and approved label Oct 19, 2026

omry force-pushed the pr74 branch from 08cbbb1 to a8b5b14 Compare October 19, 2026 18:15

omry force-pushed the pr74 branch from a8b5b14 to 67556b1 Compare October 19, 2026 18:22

omry added the approved PR reviewed and approved label Oct 19, 2026

omry merged commit 11b9241 into main Oct 19, 2026
5 checks passed

omry deleted the pr74 branch October 19, 2026 19:27

Navigation Menu

Repository navigation

Install Node maintenance for the website - #74

Install Node maintenance for the website#74
omry merged 1 commit into
mainfrom
pr74

omry commented Oct 16, 2026 •

edited

Loading

Uh oh!

omry commented Oct 16, 2026 •

edited

Loading

Uh oh!

chatgpt-codex-connector Bot commented Oct 16, 2026 •

edited

Loading

Uh oh!

omry commented Oct 16, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 16, 2026

Uh oh!

Uh oh!

omry commented Oct 16, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 16, 2026

Uh oh!

omry commented Oct 19, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 19, 2026

Uh oh!

gitar-bot Bot commented Oct 19, 2026 •

edited

Loading

Uh oh!

omry commented Oct 19, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

omry commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

omry commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

chatgpt-codex-connector Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codex Review Summary

Uh oh!

omry commented Oct 16, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 16, 2026

Uh oh!

Uh oh!

omry commented Oct 16, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 16, 2026

Uh oh!

omry commented Oct 19, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 19, 2026

Uh oh!

gitar-bot Bot commented Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

omry commented Oct 19, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

omry commented Oct 16, 2026 •

edited

Loading

omry commented Oct 16, 2026 •

edited

Loading

chatgpt-codex-connector Bot commented Oct 16, 2026 •

edited

Loading

gitar-bot Bot commented Oct 19, 2026 •

edited

Loading