gavindiaz/mt5-quant_new
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
194 Commits 5 Branches 21 Tags
302a0c562423f2baa6aee75d116aae8c4d1af501
Commit Graph
194 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devid HW 302a0c5624 fix(ci): move GPG signing guard out of step if: — secrets context invalid there 
Referencing secrets.* in a step-level if: expression makes GitHub reject
the whole workflow file at parse time: every push to any branch produced
a startup-failure run for release.yml with zero jobs ('Code Scanning
could not...' style runs named .github/workflows/release.yml). The tags
trigger was irrelevant because an unparseable workflow has no readable
triggers.

Fix: evaluate the both-secrets-present check in job-level env (where the
secrets context IS allowed) and test env.HAS_GPG_SECRETS in the step if:.
Behavior unchanged: sign when both secrets exist, ship unsigned otherwise.
 2026-08-26 05:14:50 +07:00
Devid HW 608b07cead fix(ci): satisfy rustfmt and clippy after bin+lib split 
The Rust workflow lint job failed on master:
- cargo fmt --check: imports in src/main.rs were misordered
  (mcp_server/models/pipeline lines out of alphabetical order,
  McpError/McpRequest/McpResponse tuple unsorted) from b843146.
- cargo clippy -D warnings: clippy::new_without_default now fires on
  DealAnalyzer, ReportExtractor, OptimizationParser, StageExecutor
  and McpServer because the lib target (src/lib.rs) makes their
  pub constructors part of the public API.

Fix: reorder main.rs imports per rustfmt; add Default impls
delegating to new() for the five types.
 2026-08-26 05:02:44 +07:00
Devid HW 6db5460b99 docs: add required URLs to legacy CII justifications (report_archive, vulnerability_report_process, contribution_requirements) 2026-08-26 04:51:29 +07:00
Devid HW fcf7ac26dc fix: use correct OSPS form-field names in CII edit URLs 2026-08-26 04:26:46 +07:00
Devid HW 09b4fbd831 feat: support OSPS Baseline schema in CII criteria script 2026-08-26 03:40:16 +07:00
Devid HW 3cbb5b00a7 ci: enable manual workflow_dispatch for Scorecard rescan 2026-08-26 03:28:40 +07:00
Devid HW 65b0346628 feat: auto-open generated bestpractices.dev URL in browser when run interactively 2026-08-26 03:26:38 +07:00
Devid HW c65c4b5d1c docs: add SECURITY.md and GPG release signing for OpenSSF passing badge 
Satisfies vulnerability_report_process/know_secure_design/know_common_errors via SECURITY.md; delivery_unsigned via GPG-signed releases (public key in docs/signing-key.asc); N/A justifications for the 4 N/A-able MUST criteria (crypto_password_storage, vulnerability_report_private, vulnerability_report_response, release_notes_vulns). Backs the OpenSSF Best Practices passing badge and closes the CIIBestPracticesID alert.
 2026-08-26 03:17:38 +07:00
Devid HW b843146554 test: add cargo-fuzz fuzzing harness 
adds lib target + cargo-fuzz fuzz targets exercising pure parsers; backs dynamic_analysis criteria and the Scorecard fuzzing check.
 2026-08-26 02:58:06 +07:00
Devid HW d8b0b37919 docs: add CONTRIBUTING.md and CII best-practices criteria helper 
The scripts/cii_criteria.py helper fetches bestpractices.dev criteria
and generates pre-filled edit URLs for each criterion, streamlining
badge maintenance. CONTRIBUTING.md backs the contribution and testing
criteria referenced by the CII best-practices submission.
 2026-08-26 02:38:16 +07:00
Devid HW 38d897d52f ci: trigger scorecard rescan after adding strict-status ruleset 2026-08-25 15:43:29 +07:00
Devid HW e3b04f51b6 ci: rescan scorecard after strict branch-protection settled 2026-08-25 12:00:14 +07:00
Devid HW 66f728d545 ci: trigger scorecard rescan for tightened branch-protection 2026-08-25 11:56:33 +07:00
Devid HW 06a4f8b87d ci: trigger scorecard rescan for branch-protection update 2026-08-25 11:35:51 +07:00
Devid HW ac50ae7bae ci: declare explicit least-privilege permissions (fix Token-Permissions) 2026-08-25 10:44:44 +07:00
Devid HW dece88c514 ci: trigger OpenSSF Scorecard workflow 2026-08-25 10:39:16 +07:00
Devid HW 2951f372e3 ci: enable CodeQL + add code-scanning badge 2026-08-25 10:36:18 +07:00
Devid HW 3c6da1d1d2 ci(scorecard): auto-publish badge.json to badges branch 2026-08-25 10:36:05 +07:00
Devid HW 64cdc30df7 docs(readme): use static scorecard badge (shields ossf backend broken upstream) 2026-08-25 10:30:22 +07:00
Devid HW 5c4bb2a863 docs(readme): activate CII Best Practices badge (id 14227) 2026-08-25 10:23:27 +07:00
Devid HW 5c2b4c52a0 docs(readme): add CII Best Practices badge (placeholder until enrollment) 2026-08-25 10:09:40 +07:00
Devid HW e2cdd0684b ci: pin mcp-publisher download 2026-08-25 09:50:08 +07:00
Devid HW 8a56394f1c ci(release): support RELEASE_PAT for approval-free bot PRs (falls back to GITHUB_TOKEN) 2026-08-25 09:32:18 +07:00
Devid HW 845fce7d68 docs: add documentation index and README navigation 2026-08-25 09:25:30 +07:00
Devid HW 019ddf7c21 docs(readme): copyable install instructions for major LLM clients 2026-08-25 09:23:53 +07:00
Devid HW 599dcb14ba fix(release): attest final release artifacts instead of pre-repackage builds 2026-08-25 09:13:43 +07:00
github-actions[bot]GitHubgithub-actions[bot] <github-actions[bot]@users.noreply.github.com>
 		89d7ff5186 ci: update server.json SHA256 for v1.34.3 (#8) 
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
 2026-08-25 02:03:12 +00:00
Devid HW 3baf0e3271 release: v1.34.3 
- Version bump 1.34.2 → 1.34.3
- server.json identifier URL updated (SHA256 set by CI after build)
- CHANGELOG.md updated
v1.34.3 		2026-08-25 08:19:10 +07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Devid
 		55f072da4d chore(deps): bump dirs from 5.0.1 to 6.0.0 (#6) 
* chore(deps): bump dirs from 5.0.1 to 6.0.0

Bumps [dirs](https://github.com/soc/dirs-rs) from 5.0.1 to 6.0.0.
- [Commits](https://github.com/soc/dirs-rs/commits)

---
updated-dependencies:
- dependency-name: dirs
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): regenerate Cargo.lock to resolve duplicate thiserror entry

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Devid <devid.wahid@gmail.com>
 2026-08-25 07:59:40 +07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		e97e5bbd63 chore(deps): bump base64 from 0.22.1 to 0.23.1 (#4) 
Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.22.1 to 0.23.1.
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/marshallpierce/rust-base64/compare/v0.22.1...v0.23.1)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 07:53:00 +07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Devid
 		0e35f94705 chore(deps): bump rusqlite from 0.31.0 to 0.40.2 (#5) 
* chore(deps): bump rusqlite from 0.31.0 to 0.40.2

Bumps [rusqlite](https://github.com/rusqlite/rusqlite) from 0.31.0 to 0.40.2.
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](https://github.com/rusqlite/rusqlite/compare/v0.31.0...v0.40.2)

---
updated-dependencies:
- dependency-name: rusqlite
  dependency-version: 0.40.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): adapt to rusqlite 0.40 FromSql changes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Devid <devid.wahid@gmail.com>
 2026-08-25 07:45:55 +07:00
Devid HW d7bbaddb12 ci(release): generate build provenance attestations for artifacts 2026-08-25 07:30:12 +07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		ced1913c98 chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#3) 
Bumps the minor-and-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.1` | `1.53.1` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.6` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.1` | `1.24.1` |
| [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.13.1` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |



Updates `tokio` from 1.52.1 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.52.1...tokio-1.53.1)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.149 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.149...v1.0.151)

Updates `clap` from 4.6.1 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.6.1...clap_complete-v4.6.6)

Updates `uuid` from 1.23.1 to 1.24.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.23.1...v1.24.1)

Updates `regex` from 1.12.3 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.12.3...1.13.1)

Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.44...v0.4.45)

---
updated-dependencies:
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: uuid
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 07:27:22 +07:00
Devid HW 71e5819d38 fix(release): drop [skip ci] from server.json PR so required checks can run 2026-08-25 06:41:20 +07:00
github-actions[bot]GitHubgithub-actions[bot] <github-actions[bot]@users.noreply.github.com>
 		b41f0364c5 ci: update server.json SHA256 for v1.34.2 (#7) 
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
 2026-08-24 23:23:07 +00:00
Devid HW e03acb108b docs(readme): fix Scorecard badge, add CI, crates.io, and license badges 2026-08-25 06:06:06 +07:00
Devid HW 785c99c80d ci(scorecard): rename invalid 'publish' input to 'publish_results' so results are published 2026-08-25 06:06:05 +07:00
Devid HW 0135ffa3b4 release: v1.34.2 
- Version bump 1.34.1 → 1.34.2
- server.json identifier URL updated (SHA256 set by CI after build)
- CHANGELOG.md updated
v1.34.2 		2026-08-25 05:48:16 +07:00
Devid HW 4dded9b083 ci(release): publish to crates.io via trusted publishing (OIDC) 2026-08-25 05:46:34 +07:00
Devid HW 46e6de2474 fix: resolve clippy lints surfaced by newer toolchain in CI gate 2026-08-25 02:25:45 +07:00
Devid HW a23dbee52f fix(release): update server.json via auto-merged PR to satisfy branch ruleset 2026-08-25 02:07:38 +07:00
Devid HW ffe55863ba chore(templates): link Discussions from issue chooser 2026-08-25 01:57:22 +07:00
Devid HW ed82452200 chore: add CODEOWNERS 2026-08-25 01:52:45 +07:00
Devid HW 941be795c1 chore(templates): add issue forms and PR template 2026-08-25 01:52:17 +07:00
Devid HW 6a54b2f54a ci: gate PRs on fmt and clippy, add run concurrency groups 2026-08-25 01:50:26 +07:00
Devid HW e17e6b82fa ci(security): add OpenSSF Scorecard analysis and badge 2026-08-25 01:45:40 +07:00
Devid HW a6618e6811 ci(hardening): least-privilege GITHUB_TOKEN permissions across workflows 2026-08-25 01:45:15 +07:00
Devid HW e6111c421f ci(security): add cargo-deny checks for advisories, licenses, bans, sources 2026-08-25 01:44:40 +07:00
Devid HW 5056be3ee9 ci(security): add dependency review on PRs 2026-08-25 01:43:30 +07:00
Devid HW 059141a3d5 docs(security): add security policy 2026-08-25 01:43:15 +07:00