Bump docker/build-push-action from 5 to 7#1
Merged
RahulModugula merged 1 commit intoApr 16, 2026
Conversation
dependabot
Bot
added
dependencies
Owner
|
@dependabot rebase |
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 7. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v5...v7) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/docker/build-push-action-7
branch
from
April 16, 2026 17:07
24285e5 to
6ac8db1
Compare
dependabot
Bot
deleted the
dependabot/github_actions/docker/build-push-action-7
branch
April 16, 2026 17:10
RahulModugula
added a commit
that referenced
this pull request
Apr 19, 2026
…on mapping - Add tree-sitter-rust and tree-sitter-java dependencies to pyproject.toml - Add optional grammar imports in languages.py following TypeScript/Go pattern - Add Rust/Java node-type mappings to tree_sitter_parser.py: - _COMPLEXITY_NODES: if/match/for/loop expressions - _FUNCTION_NODES: function_item, method_declaration, constructor_declaration - _CLASS_NODES: struct_item, enum_item, class_declaration, interface_declaration - _IMPORT_NODES: use_declaration, import_declaration - _COMMENT_NODES: line_comment, block_comment - Add .rs and .java to EXTENSION_TO_LANGUAGE in webhook_processor.py - Add .rs and .java to _EXTENSION_MAP in mcp/server.py - Add test_tree_sitter_parses_rust and test_tree_sitter_parses_java - Add test_rust_and_java_not_skipped for webhook processor Fixes: #1.6, #1.7 — README "6 languages" claim is now accurate and verifiable Test: 51/51 tests pass
RahulModugula
added a commit
that referenced
this pull request
Apr 19, 2026
- Add matches() function to scorer.py to encapsulate sample-level matching as an explicit, documented extension point for future tightening - Update classify() to route through matches() for clarity - Expand leaderboard.md Methodology section with: - Exact TP/FP/FN/TN definitions with truth table - Step-by-step scoring algorithm (5 steps) - Why sample-level matching is used (small self-contained snippets) - Honest caveats about 100% recall number - Category mismatch limitation - Distinction from official SWE-bench leaderboard - Reimplementation guide with minimal Python code Fixes: #1.5 — SWE-bench recall methodology now documented honestly Note: Sample-level matching is appropriate for these small snippets where entire code IS buggy context. 100% recall reflects breadth of rule coverage, not precision of bug localization.
RahulModugula
added a commit
that referenced
this pull request
Apr 19, 2026
- Add comment marking vector_store_enabled as experimental in config.py with tracking issue placeholder for future shipping - Add logger.warning() in vector_store.py get_vector_store() to indicate experimental status when accessed Fixes: #1.4 — Vector store feature is now clearly marked as experimental. README has no vector/embedding/semantic search claims, so no false advertising existed.
RahulModugula
added a commit
that referenced
this pull request
Apr 19, 2026
- Add test_committed_example_rule_detects_pickle_loads() that: - Loads committed EXAMPLE001 rule from repo root via load_custom_rules() - Registers it into a RuleEngine - Passes code containing pickle.loads(user_input) - Asserts ≥1 finding with non-null severity and line_start - Add test_committed_example_rule_no_false_positive() that: - Same setup but passes safe code using json.loads(user_input) - Asserts zero findings - Includes pytest.skip() guard if no pickle rule is found Fixes: #1.8 — Full e2e test coverage exists for loading committed YAML rule → compiling pattern → evaluating against matching code → asserting finding with correct attributes
RahulModugula
added a commit
that referenced
this pull request
Apr 19, 2026
- Add Context import from FastMCP for progress reporting
- Add _report_progress_safe() helper function that gracefully handles
stdio transport errors by catching any exceptions and continuing
- Modify _run_review() to:
- Accept optional ctx: Context | None parameter
- Use LangGraph's astream_events() to track node completions
- Report progress after each major pipeline stage:
* parse_code → "Odin reviewing… parsing complete" (1/6)
* enrich_context → "Odin reviewing… context enriched" (2/6)
* Each agent run → "Odin reviewing… N/3 agents complete"
* synthesize → "Odin reviewing… synthesizing findings" (6/6)
- Include fallback to ainvoke() if streaming doesn't produce a result
- Update all MCP tool functions (review_code, analyze_file, get_findings,
review_diff) to accept and pass Context parameter
- Add test_progress_callback_invoked_per_node() that verifies progress is
reported once per pipeline node with correct stage names and incrementing counters
- Add test_progress_callback_noop_without_context() that confirms graceful
no-op when Context is None
- Add test_progress_callback_graceful_fallback_on_error() that verifies
exceptions from Context are caught without blocking execution
Fixes: #1.10 — MCP clients now display incremental progress during
reviews > 5 seconds. Stdio fallback gracefully handles exceptions.
Test: 10/10 tests pass
RahulModugula
added a commit
that referenced
this pull request
Apr 19, 2026
- Run benchmark harness for odin-rules with seed 42 - Run benchmark harness for odin-dataflow with seed 42 - Update leaderboard.md with odin-rules and odin-dataflow rows: * False Positive Rate on Clean Code: 8.8% (17/193) vs 0.0% (0/193) * Recall on SecVulEval: 86% (12/14 TP, 2 FN) vs 21% (3/14 TP, 11 FN) * Recall on CVE-Bench: 32% (16/50 TP, 34 FN) vs 6% (3/50 TP, 47 FN) * Recall on SWE-bench Verified: 100% (50/50 TP, 0 FN) vs 2% (1/50 TP, 49 FN) - Preserve existing semgrep rows for comparison - Update run ID to f88a5c57 and date to 2026-04-19 - Commit raw result JSON files for reproducibility - Verify reproducibility with second run (identical results within ±2%) Fixes: #1.2 — Leaderboard now contains odin-rules, odin-dataflow, and semgrep rows across every dataset. Results are reproducible.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps docker/build-push-action from 5 to 7.
Release notes
Sourced from docker/build-push-action's releases.
... (truncated)
Commits
bcafcacMerge pull request #1509 from docker/dependabot/npm_and_yarn/vite-7.3.218e62f1Merge pull request #1510 from docker/dependabot/npm_and_yarn/lodash-4.18.146580d2chore: update generated content3f80b25chore(deps): Bump lodash from 4.17.23 to 4.18.1efeec95Merge pull request #1505 from crazy-max/refactor-git-contextddf04b0Merge pull request #1511 from docker/dependabot/github_actions/crazy-max-dot-...db08d97chore(deps): Bump the crazy-max-dot-github group with 2 updatesef1fb96Merge pull request #1508 from docker/dependabot/github_actions/docker/login-a...2d8f2a1chore: update generated content919ac7bfix test since secrets are not written to temp path anymore