Conversation
Summary of ChangesHello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request performs a routine version increment for the project packages. It updates the version numbers across all relevant configuration files, including package manifests, skill definitions, and lock files, to prepare for the next release. Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here. Footnotes
|
4637cc7 to
471fe69
Compare
There was a problem hiding this comment.
Code Review
This pull request updates the version of the @googleworkspace/cli and its associated crates and skills from 0.22.4 to 0.22.5. The primary change involves pinning cross-rs to v0.2.5 in the release workflow to prevent unpinned git HEAD builds, ensuring consistent and stable releases. I have no feedback to provide as the changes are standard version increments across the repository.
|
/gemini review |
471fe69 to
1ed042b
Compare
|
/gemini review |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #655 +/- ##
=======================================
Coverage 70.85% 70.85%
=======================================
Files 44 44
Lines 20644 20644
=======================================
Hits 14628 14628
Misses 6016 6016 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Code Review
This pull request increments the version of @googleworkspace/cli and its associated components from 0.22.4 to 0.22.5. The update is applied consistently across Cargo.toml, package.json, and a wide range of skill definition files. The release notes indicate the inclusion of a cargo-audit CI workflow, SHA256 checksum verification for the npm postinstall script, and a pinned version for the cross-rs dependency. I have no feedback to provide.
There was a problem hiding this comment.
Code Review
This pull request updates the project version from 0.22.4 to 0.22.5 across all configuration files, including Cargo manifests, npm package files, and skill metadata. The release includes a new cargo-audit CI workflow, a fix for binary auto-installation, SHA256 checksum verification for downloads, and a pinned version for cross-rs. I have no feedback to provide.
1ed042b to
e2d0a93
Compare
|
/gemini review |
e2d0a93 to
462a566
Compare
|
/gemini review |
There was a problem hiding this comment.
Code Review
This pull request increments the version of @googleworkspace/cli and its components to 0.22.5. The update introduces security and reliability improvements, including cargo-audit and cargo-deny for dependency scanning, SHA256 checksum verification for binary downloads, and a fix for binary auto-installation. These changes are reflected in the CHANGELOG and across all package manifests and skill metadata files. I have no feedback to provide.
There was a problem hiding this comment.
Code Review
This pull request updates the version of the @googleworkspace/cli package and its associated crates from 0.22.4 to 0.22.5. The release includes new CI workflows for security auditing (cargo-audit and cargo-deny), a fix for binary auto-installation issues, SHA256 checksum verification for npm downloads, and pinning the cross-rs dependency. Additionally, version metadata has been updated across all skill definition files. I have no feedback to provide.
462a566 to
7178dbc
Compare
|
/gemini review |
There was a problem hiding this comment.
Code Review
This pull request bumps the version of @googleworkspace/cli and its associated crates and skills from 0.22.4 to 0.22.5. The update incorporates security enhancements such as cargo-audit and cargo-deny, migrates the internal AI skills registry from YAML to TOML to improve supply chain security, and improves the npm installation process with binary auto-installation and checksum verification. I have no feedback to provide.
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@googleworkspace/cli@0.22.5
Patch Changes
5d24ac2: Add cargo-audit CI workflow for automated dependency vulnerability scanning
ecddf2e: Add cargo-deny configuration for license, advisory, and source auditing
503315b: Update installation instructions to prioritize GitHub Releases over npm
6ccbb42: fix: auto-install binary on run if missing
pnpm skips postinstall when the package is already up to date.
This ensures run.js will auto-trigger install.js if the
binary is missing, fixing the 'gws binary not found' error.
b307856: Migrated the internal AI skills registry (personas and recipes) from YAML to TOML. This allows us to drop the unmaintained serde_yaml dependency, improving the project's supply chain security posture.
158f93a: Verify SHA256 checksum of downloaded binary in npm postinstall script
b422e5d: Pin cross-rs to v0.2.5 in release workflow to prevent unpinned git HEAD builds