Skip to content

deps: bump spawnllm to v0.17.1 so Claude passes read the Keychain first - #15

Merged
yasyf merged 1 commit into
mainfrom
spawnllm-0-17-1
Oct 7, 2026
Merged

yasyf merged 1 commit into
mainfrom
spawnllm-0-17-1

Conversation

@yasyf

@yasyf yasyf commented Oct 7, 2026

Copy link
Copy Markdown
Owner

slop-cop's rewrite and plainify passes run Claude through spawnllm's Go module, which is pinned at v0.13.0. That version seeds the isolated claude -p run from ~/.claude/.credentials.json before the macOS Keychain. On a Mac where the file holds an expired token, every Claude rewrite fails with Failed to authenticate: OAuth token revoked.

spawnllm v0.17.1 (yasyf/spawnllm#14) reads the Keychain first, as Claude Code does, and retries on the next source when the CLI rejects a token. This bumps the pin from v0.13.0 to v0.17.1. go build ./... and go vet ./internal/llm/ pass against it unchanged.

Claude-Session-Id: 899e5f7a-9099-4d8f-b96d-79291e63b5b4
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​yasyf/​spawnllm/​go@​v0.13.0 ⏵ v0.17.198100100100100

View full report

@yasyf
yasyf merged commit f72086b into main Oct 7, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant