chore(core): sync vendored core/ → 03ac3387 (v3.3.0)#48
Merged
Conversation
03ac338 Merge pull request #202 from dotgibson/claude/dotfiles-static-audit-up36bl e8f6ba1 fix(maint): keep set -u from aborting the minimal-env PATH bootstrap 7d0dc78 fix(core): portability + strictness cleanups (grep -E, shasum fallback, set -u) b06e1ac Merge pull request #201 from dotgibson/claude/tool-install-parity 9c05e94 docs(porting): correct Alpine duf/glow to community apk c0154d5 docs(porting): add the newly-packaged doctor tools + fix the yq row 914cf27 Merge pull request #200 from dotgibson/claude/parity-core-commands 6421397 fix(parity): add the missing core-update dispatch check 7b3c92a feat(parity): pin the `core` front door across zsh + pwsh 05926cb Merge pull request #198 from dotgibson/claude/dotfiles-architecture-audit-gotuav c669c7d Merge pull request #199 from dotgibson/claude/dotfiles-automation-plan-d46hq4 14f24e6 fix(core): low-severity portability + polish fixes from the audit b1039f1 fix(freshness): normalize jq null so tagless repos don't render "null" 43353a6 feat(freshness): add three live cross-repo signals to the fleet board cad1672 Merge pull request #197 from dotgibson/claude/dotfiles-architecture-audit-gotuav c3335ce fix(zsh): harden serve macOS discovery + fix changelog emphasis style 32d1a15 fix(zsh): remediate three startup defects from the architecture audit fa5c9a3 Merge pull request #196 from dotgibson/claude/routines-foundation c24c201 fix(routines): address review — GH_REPO, matrix columns, baseline refs 39c125b feat(routines): shell-review + drift-triage + reusable OS package-availability git-subtree-dir: core git-subtree-split: 03ac33871af29034aa49d551fdbdd636858ab6c4
…otfiles-static-audit-up36bl
There was a problem hiding this comment.
Pull request overview
Syncs the vendored core/ subtree to dotfiles-core 03ac3387 (v3.3.0), bringing in accumulated Core updates plus several audit-driven fixes and portability improvements across shell, tmux, scripts, and workflows.
Changes:
- Hardens and improves shell behavior (zsh completion scoping,
serveURL discovery, tmux popup scriptsset -u). - Improves cross-platform portability (BusyBox-friendly
ipusage,sha256sum→shasumfallback, Debianbatcatfallback). - Expands Core automation/docs (freshness dashboard live GH signals, new Claude routine commands + reusable workflow, updated porting/parity docs and changelog).
Reviewed changes
Copilot reviewed 24 out of 25 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| core/zsh/options.zsh | Wraps compinit cache logic to prevent top-level local leakage; documents performance rationale for no rehash true. |
| core/zsh/functions.zsh | Refactors serve IP discovery into _serve_advertise with macOS fallback for URL/QR output. |
| core/tmux/scripts/tmux-sesh.sh | Enables set -u and adds eza→ls fallback for fzf preview. |
| core/tmux/scripts/tmux-scratch.sh | Enables set -u for safer popup execution. |
| core/tmux/scripts/tmux-menu.sh | Enables set -u and adds bat→batcat fallback in previews. |
| core/starship/starship.toml | Replaces Linux VPN probe from ifconfig to portable ip link show parsing (incl. BusyBox). |
| core/scripts/update-tool-checksums.sh | Adds shasum -a 256 fallback when sha256sum is unavailable. |
| core/scripts/test-core.sh | Adds hermetic tests for macOS _serve_advertise discovery paths. |
| core/scripts/parity-check.sh | Extends parity checks to include the core front-door commands across zsh/pwsh. |
| core/scripts/freshness-dashboard.sh | Adds best-effort GitHub API live signals (release drift, Renovate PR counts, routine issue links). |
| core/PORTING-MATRIX.md | Updates tool/package naming matrix and expands distro-specific footnotes. |
| core/PARITY.md | Documents the core command “front door” parity contract and enforcement. |
| core/nvim/lua/gerrrt/config/options.lua | Uses stdpath("state") for undo dir; removes ineffective encoding setting with rationale. |
| core/maint/dotfiles-maint.sh | Adds set -uo pipefail and makes PATH construction nounset-safe. |
| core/git/gitconfig | Replaces deprecated egrep usage and clarifies per-directory work identity include behavior. |
| core/CLAUDE.md | Documents additional on-demand Claude routines. |
| core/CHANGELOG.md | Records the v3.3.0 delta including new dashboard signals and portability fixes. |
| core/.github/workflows/freshness-dashboard.yml | Updates workflow description to reflect added live GH API signals. |
| core/.github/workflows/claude-routines.yml | Adds scheduled jobs for shell-review and drift-triage routines. |
| core/.github/workflows/claude-routines-call.yml | Introduces reusable workflow for OS repos to run /os-package-availability. |
| core/.claude/commands/shell-review.md | Adds /shell-review routine definition and scope guidance. |
| core/.claude/commands/os-package-availability.md | Adds /os-package-availability routine definition and reporting expectations. |
| core/.claude/commands/drift-triage.md | Adds /drift-triage routine definition and output format. |
| core/.bin/sync-upstream.sh | Allows overriding upstream repo URL and target branch via environment variables. |
| core.lock | Updates provenance stamp to Core v3.3.0 SHA/branch. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Mechanical
git subtree pullof the shared Core layer — brings this repo's vendoredcore/up todotfiles-coremain@03ac3387(v3.3.0) viascripts/sync-core.sh.Why now
Fans out the merged static-analysis audit fixes (
grep -Ein gitconfig,shasumfallback,set -uo pipefailon the maint runner,set -uon the tmux popups) plus the accumulated Core delta since this repo's last sync (1db7213..03ac338) — routines, workflows,functions.zsh/options.zsh, starship, nvim options, docs.Contents
Squashed 'core/' changes from 1db7213..03ac338— the subtree updatechore(core): core.lock → 03ac33871af2 (v3.3.0)— provenance stamp (records the exact Core SHA)No hand-edits to the vendored tree. Generated by
make sync; the audit gate is satisfied on the Core side — dotfiles-core#202 passed the full audit (shellcheck · shfmt · zsh -n · luacheck · markdownlint · behavioral suite) on ubuntu + macOS at merge.🤖 Generated with Claude Code
Generated by Claude Code