chore(deps): update fro-bot/agent to v0.115.1 - #3920
Merged
Merged
Conversation
fro-bot
Bot
added
action
fro-bot
Bot
force-pushed
the
renovate/github-actions
branch
2 times, most recently
from
September 24, 2026 02:15
6f6d503 to
0fd835a
Compare
This was referenced Sep 24, 2026
fro-bot
Bot
force-pushed
the
renovate/github-actions
branch
2 times, most recently
from
September 24, 2026 23:23
e1b388a to
72ede81
Compare
fro-bot
Bot
changed the title
fro-bot
Bot
force-pushed
the
renovate/github-actions
branch
from
September 25, 2026 00:42
72ede81 to
395fa0c
Compare
fro-bot
Bot
force-pushed
the
renovate/github-actions
branch
from
September 25, 2026 03:14
395fa0c to
d94c26b
Compare
marcusrbrown
approved these changes
Sep 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.114.0→v0.115.1Release Notes
fro-bot/agent (fro-bot/agent)
v0.115.1Compare Source
What's new
Cloning private repositories now works when Git needs to answer a credential prompt. The askpass helper is executable even under restrictive umasks, fixing the permission error that previously prevented authenticated clones.
Clone credentials are also limited to GitHub HTTPS prompts, and global and system Git configuration are disabled during cloning so planted URL rewrites cannot redirect the authenticated request. Redirects that keep a repository reachable after a GitHub rename remain supported. #1658
Full changelog
0.115.1 (2026-09-24)
Bug Fixes
Continuous Integration
v0.115.0Compare Source
What's new
Gateway runs now record the state of the checkout they began with, including its commit, branch or detached HEAD, and whether the working tree was dirty or left in the middle of a Git operation. Each agent response appends that starting state so readers can tell which code a persistent workspace actually used; it explicitly reports that remote freshness was not checked.
Checkout preparation and inspection now run under the repository lock, preventing another run from reaching the same tree while it is being prepared. Inspection is read-only and disables repository-configured hooks, filters, and fsmonitor; unavailable state is reported without failing a run, while a checkout that is not the expected repository stops it. The operator run-status contract now also carries this provenance and distinguishes workspace-preparation failures. #1656
Full changelog
0.115.0 (2026-09-23)
Features
Build System
Bug Fixes
Miscellaneous Chores
v0.114.1Compare Source
What's new
Operator web control surfaces behind a reverse proxy now apply sign-in and rate limits to the resolved client rather than the proxy address. This prevents multiple users behind one proxy from consuming a shared sign-in budget, while health polling no longer competes with sign-in attempts.
Forwarding metadata is accepted only from configured trusted proxies, and the client address is resolved from the proxy chain rather than caller-supplied values. Deployments that enable the operator surface must now set
GATEWAY_OPERATOR_TRUSTED_PROXIES; missing, malformed, or ambiguous forwarding information is rejected instead of being guessed.An in-progress sign-in whose client address changes now releases its attempt and restarts once, rather than stranding the operator in a failed flow. Invalid, spent, and tampered sign-in states retain their existing rejection behavior. #1651
Full changelog
0.114.1 (2026-09-22)
Build System
ebfe2f9(#1641) (47eb59b)Bug Fixes
Continuous Integration
Miscellaneous Chores
Configuration
📅 Schedule: (in timezone America/Phoenix)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.