forked from athasdev/athas
-
Notifications
You must be signed in to change notification settings - Fork 0
Resolve PR Conflicts #1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
43 commits
Select commit
Hold shift + click to select a range
4e66426
Remove unused exports from the public API
mehmetozguldev fb7a471
Add runtime language catalog and CDN deploy pipeline
mehmetozguldev 3e25586
Fix editor tab sync, hover lifecycle, and open-file reliability
mehmetozguldev acd7c67
Refactor SQLite viewer and optimize global search previews
mehmetozguldev d361aeb
Refresh theme system and align terminal and UI styling
mehmetozguldev 556976a
Run docs and extensions workflows only on release events
mehmetozguldev 6c6c65e
Update ACP backend integration
mehmetozguldev 42cbb8f
Update AI chat UI and ACP frontend types
mehmetozguldev 4cd6db8
Update editor syntax highlighting and LSP integration
mehmetozguldev 30d2632
Update Git API and status commands
mehmetozguldev 16b15ef
Update database viewer and layout components
mehmetozguldev 0e48df8
Update settings, tabs, and window UI components
mehmetozguldev 763f137
Update README.md
mehmetozguldev 614010b
Fix editor view reset when switching to uncached files
mehmetozguldev c4e7af5
Remove GitHub Copilot integration
mehmetozguldev a3ad0ab
Security updates for desktop auth, autocomplete, and test coverage (#…
mehmetozguldev 2452306
Fix memory leak, reduce I/O, parallelize extensions, add code splitti…
visualstudioblyat ec1798b
Add code of conduct and contributor agreement
mehmetozguldev d5800b5
Update broken links on documentation index
mehmetozguldev 1b6e477
Fix deploy workflow safe.directory for VPS checkout
mehmetozguldev e6c03ca
Make deploy workflow stash dirty VPS worktree before pull
mehmetozguldev 501823f
Fallback to CDN highlight query when local parser assets are unavailable
mehmetozguldev f3c9484
Revert "Fallback to CDN highlight query when local parser assets are …
mehmetozguldev fcd8acc
Merge TSX into TypeScript extension flow in marketplace and installer
mehmetozguldev 7ec61c7
Drive Ruby/ERB detection from extension metadata
mehmetozguldev 1c84e82
Prepare 0.4.0 release
mehmetozguldev 85e964c
Bump version to 0.4.0
mehmetozguldev cde72ef
Refresh generated extensions catalog
mehmetozguldev 0589ee2
Harden Linux release AppImage environment
mehmetozguldev 3f425c9
Disable macOS AutoFill heuristics in webview
mehmetozguldev d33d5e1
Add Go and Cargo binary detection for ACP agents
mehmetozguldev b144bc7
Move extension content to dedicated extensions repo
mehmetozguldev 1bd3f2f
Simplify rules and contributing docs
mehmetozguldev fde4375
Remove unused root files
mehmetozguldev 8d0bdcf
Update CI workflows
mehmetozguldev 7a5454f
Move docs from Next.js app to flat mdx files
mehmetozguldev ec5ae3b
Remove changelog check from release scripts
mehmetozguldev fc466ac
Fix macOS autofill heuristics compilation warning
mehmetozguldev 495592c
Replace new chat button with unified agent selector in chat header
mehmetozguldev 147875e
Remove extensions catalog check from CI
mehmetozguldev 4140f3a
Make athas dev scripts app-only
mehmetozguldev 838c052
Merge remote-tracking branch 'upstream/master' into codex/resolve-pr-…
kodahhhhh e039c39
Update auth, resolve conflicts
kodahhhhh File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI 28 days ago
In general, the fix is to explicitly declare a minimal
permissions:block in the workflow file so that theGITHUB_TOKENused by the jobs is limited to the least privileges required. For CI workflows that only check out code, restore caches, install dependencies, and run checks,contents: readis typically sufficient; no write or admin scopes are needed.The best way to fix this workflow without changing functionality is to add a root-level
permissions:block settingcontents: read. This applies to all jobs (bunandrust), since neither job performs write operations back to GitHub. Concretely, in.github/workflows/ci.yml, add:between the
concurrency:section (line 10–12) and thejobs:section (line 14). No additional imports or definitions are required because this is pure workflow configuration. We do not need per-jobpermissionsblocks unless different jobs require different scopes, which they do not here.