Each pull request is checked for vulnerable dependencies #61

2026-10-13T18:57:15+02:00

claude-code commented

2026-10-13 18:57:15 +02:00

🤖 Generated with Claude Code

See [the PR document](doc/prs/2026-10-13-PR%2361-dependencies-for-prs.md). 🤖 Generated with [Claude Code](https://claude.com/claude-code)

claude-code added 1 commit 2026-10-13 18:57:16 +02:00

PR document: each pull request is checked for vulnerable dependencies

werkator build succeeded after 00:56

Details

4a736862c5

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

claude-code added 1 commit 2026-10-13 19:00:25 +02:00

The build dependencies checks each branch and only reads the NVD data, which a nightly build loads

werkator build succeeded after 01:02

Details

8cbabe4315

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

claude-code added 1 commit 2026-10-13 19:03:18 +02:00

The build dependencies names all branches, since Werkator merges a branch's trigger into main's

werkator build succeeded after 00:51

Details

werkator/dependencies build succeeded after 00:20

Details

ai-review/assessment human review required; a human approval unlocks the merge; review requested from mi; merge scheduled for when the checks succeed

Details

ai-review/gate build succeeded after 02:14

Details

a90c36a099

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

claude-code marked the pull request as ready for review 2026-10-13 19:04:59 +02:00

ai-reviewer commented

2026-10-13 19:07:20 +02:00

🟡 werkrevisor: YELLOW / HUMAN_REVIEW

Change kind: mixed.

Reasons

YELLOW risky build changes according to Jev: .werkator.yml (weakens checks 0.20, risk 2.02, security 0.63), dashboard/build.gradle.kts (weakens checks 0.31, risk 1.70, security 0.23)

Classifier

7 of 7 units passed all questions (1 PR document(s)).

_{Usage: model `openrouter/minimax/minimax-m3`, LLM done, tokens counted before the call 10805, calls 1, tokens in 10489 / out 20775 (reasoning included in out), duration 126.9 s, cost 0.0280 USD (reported), classifier `jev-1.13.0` calls 7, tokens in 5333, cost 0.0002 USD, build file judge `jev-1.13.0` calls 2, tokens in 1964, cost 0.0001 USD, phases: path_judge 0.4 s, classifier 0.4 s, context 1.9 s, model_review 123.7 s, config: defaults + host + repository (.werkrevisor.toml at main 5fdfd84).

Reviewed head `a90c36a0997be1ed4aa126efac99d6b15d6ea640` against base `5fdfd84e29d7fb9217bdf78dfc5dd1f655449002`, werkrevisor 0.41.0.}

## 🟡 werkrevisor: YELLOW / HUMAN_REVIEW Change kind: `mixed`. ### Reasons - **YELLOW** risky build changes according to Jev: .werkator.yml (weakens checks 0.20, risk 2.02, security 0.63), dashboard/build.gradle.kts (weakens checks 0.31, risk 1.70, security 0.23) ### Classifier 7 of 7 units passed all questions (1 PR document(s)). <sub> Usage: model `openrouter/minimax/minimax-m3`, LLM done, tokens counted before the call 10805, calls 1, tokens in 10489 / out 20775 (reasoning included in out), duration 126.9 s, cost 0.0280 USD (reported), classifier `jev-1.13.0` calls 7, tokens in 5333, cost 0.0002 USD, build file judge `jev-1.13.0` calls 2, tokens in 1964, cost 0.0001 USD, phases: path_judge 0.4 s, classifier 0.4 s, context 1.9 s, model_review 123.7 s, config: defaults + host + repository (.werkrevisor.toml at main 5fdfd84).<br> Reviewed head `a90c36a0997be1ed4aa126efac99d6b15d6ea640` against base `5fdfd84e29d7fb9217bdf78dfc5dd1f655449002`, werkrevisor 0.41.0. </sub>

ai-reviewer scheduled this pull request to auto merge when all checks succeed 2026-10-13 19:07:20 +02:00

ai-reviewer requested review from mi 2026-10-13 19:07:20 +02:00

mi approved these changes

2026-10-13 19:20:46 +02:00

ai-reviewer merged commit d679c13797 into main

2026-10-13 19:20:48 +02:00

ai-reviewer deleted branch claude-code/dependencies-for-prs

2026-10-13 19:20:48 +02:00

Sign in to join this conversation.

3 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: mi/werkregie#61