[edbfi]

What changed

• design/repos.md: EasyHDR's toolchain is now Rust 1.99.0 (EasyHDR#176 merged).
• STATE.md: new open item. EasyHDR's fuzz/ crate depends on easyhdr by path, so a root Dependabot PR that raises a shared requirement fails the locked fuzz check until fuzz/Cargo.lock follows. The open item records the manual fix that worked on #179. The freshness line is updated.

Evidence

Three Dependabot PRs had ci-ok failing. Each got one fix commit on its branch, plus a Codex review (gpt-6-astra, high: no defects in the fix commits) and a Pullfrog review of the new head ("No new issues found"). Then auto-merge per auto-merge.md rule 10.

• yt-redirect#93 (astro 7.3.8): smoke failed at bun run build. astro 7.3.8 no longer installs esbuild, and astro.config.mjs set vite.build.minify: "esbuild". The fix drops the override, so Vite 8 uses its default Oxc minifier.
  • Local checks: build, bun test (30), lint, bun run check and Playwright smoke (24) all pass. CSS is byte-identical; JS+CSS+HTML went from 94,270 to 86,851 bytes.
  • Merged as 2d7b970. Main CI and deploy succeeded, and https://yt.edb.fi serves Astro v7.3.8.
  • No other org repo sets an esbuild minifier (grepped every clone).
• EasyHDR#176 (rust-toolchain 1.99.0): checks failed on the new pedantic lint clippy::assert_is_empty and on two #[expect(clippy::float_cmp)] that 1.99 no longer needs.
  • The fix uses assert_ne!(x, "") for the message-less asserts and removes the unfulfilled expectations.
  • Full Windows CI passed on the PR. Merged as 78bdec6; main CI passed (checks, tests, smoke, deny).
• EasyHDR#179 (tray-icon 0.26.1): deny failed at cargo check --locked --manifest-path fuzz/Cargo.toml.
  • The fix re-resolves fuzz/Cargo.lock minimally: tray-icon 0.26.1 and muda 0.21.2, dropping libxdo, libxdo-sys and x11.
  • Merged as 7fa4245.
• Guards: prek run --all-files --hook-stage manual exits 0.

Not changed

• The fuzz sync stays manual. Automating it needs a new privileged workflow, and folding /fuzz into the root Dependabot entry would change D10's monthly schedule. Both options are recorded in the open item.
• EasyHDR's .agents/rules/rust-1_98-core.md is an agent-rules copy (repos.md rule 10). A 1.99 refresh has to start in agent-rules.
• The 10 TypeScript 7 Dependabot PRs stay open. They wait on Svelte support for TS 7 (owner, 2026-10-12).

Owner actions

None.

[pullfrog]

✅ No new issues found.

Reviewed changes

Reviewed the single commit against main: two docs files.

• design/repos.md: the EasyHDR Native-tier row now says Rust 1.99.0. A repo-wide grep finds no remaining 1.98 references to EasyHDR.
• STATE.md: new Open item for the fuzz/Cargo.lock sync on root Dependabot PRs. It has a [V, 2026-10-11] tag, and its auto-merge.md rule 10 and D10 references resolve. Last updated unix and ISO values agree (1791764525 = 2026-10-12T00:22:05Z).

python3 tools/doc_guard/doc_guard.py passes. The PR's claims about EasyHDR, yt-redirect and Dependabot behaviour live in other repos and can't be verified from this checkout.

  ^{｜ Fix it ➔ ｜ View workflow run ｜ Using claude-sonnet-5-5 ｜ 𝕏}