Skip to content

Conversation

@unclesp1d3r
Copy link
Member

This pull request updates the documentation and dependency advisory configuration to improve developer workflow and clarify project standards. The most important changes include adding GitHub CI monitoring commands to the developer guide, clarifying Rust documentation conventions, and updating the security advisory ignore list for dependencies.

Developer workflow improvements:

  • Added a section to AGENTS.md describing GitHub CI monitoring commands, including how to list recent runs and view logs for failed jobs.

Documentation standards:

  • Clarified in AGENTS.md that brackets in Rustdoc paths (such as /proc/[pid]/stat) should be escaped to avoid broken link warnings.

Dependency advisory management:

  • Updated deny.toml to ignore the RUSTSEC-2023-0089 advisory for atomic-polyfill, explaining that it is only pulled in by an indirect dependency and is not a security vulnerability. Included a TODO to remove the ignore when the dependency is updated.

unclesp1d3r and others added 2 commits January 30, 2026 22:02
- Add GitHub CI monitoring commands (gh run list, gh run view) to
  quick reference section
- Document rustdoc bracket escaping for /proc/[pid]/stat paths
- Add .claude.local.md and .claude/*.local.md to gitignore for
  personal Claude configuration

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add atomic-polyfill unmaintained advisory to deny.toml ignore list.
This is a transitive dependency via postcard → heapless, not a security
vulnerability. Upstream has merged heapless 0.9 support but no release yet.

Tracking: jamesmunns/postcard#223

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@unclesp1d3r unclesp1d3r linked an issue Jan 31, 2026 that may be closed by this pull request
@unclesp1d3r unclesp1d3r self-assigned this Jan 31, 2026
@dosubot dosubot bot added the size:S This PR changes 10-29 lines, ignoring generated files. label Jan 31, 2026
@dosubot
Copy link

dosubot bot commented Jan 31, 2026

Related Documentation

Checked 21 published document(s) in 1 knowledge base(s). No updates required.

How did I do? Any feedback?  Join Discord

@coderabbitai
Copy link

coderabbitai bot commented Jan 31, 2026

Summary by CodeRabbit

Release Notes

  • Chores
    • Updated Git ignore patterns for local configuration files
    • Enhanced development documentation with GitHub CI monitoring guidance
    • Updated Rustdoc coding standards documentation regarding bracket escaping
    • Updated security advisory configuration

✏️ Tip: You can customize this high-level summary in your review settings.

Walkthrough

Adds local Claude configuration ignore patterns to .gitignore. Updates AGENTS.md documentation with GitHub CI monitoring commands and Rustdoc bracket escaping guidance. Expands deny.toml with RUSTSEC-2023-0089 security advisory ignore entry.

Changes

Cohort / File(s) Summary
Configuration Updates
.gitignore, deny.toml
Added local Claude config ignore patterns (.claude.local.md, .claude/*.local.md) and RUSTSEC-2023-0089 advisory ignore with explanatory comment block.
Documentation
AGENTS.md
Added GitHub CI monitoring commands (gh run list/view) to Quick Reference snippet and documented Rustdoc bracket escaping requirement for paths like /proc/[pid]/stat.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Poem

Hop, hop, the config files now bloom,
With Claude's local patterns clearing the room,
Rustdoc escapes and CI commands shine bright,
Security advisories tucked out of sight,
Our repo's cozy, everything feels right! 🐰✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The PR title 'fix: rustsec-2023-0089 atomic polyfill is unmaintained' accurately reflects the main objective of addressing the security advisory in deny.toml, though multiple documentation changes are also included.
Description check ✅ Passed The PR description comprehensively describes all changes made: GitHub CI commands, Rustdoc escaping conventions, .gitignore patterns, and deny.toml advisory configuration.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch 129-rustsec-2023-0089-atomic-polyfill-is-unmaintained

Comment @coderabbitai help to get the list of available commands and usage tips.

@dosubot dosubot bot added configuration Configuration management and settings documentation Improvements or additions to documentation labels Jan 31, 2026
@codecov
Copy link

codecov bot commented Jan 31, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@unclesp1d3r unclesp1d3r merged commit 38a8872 into main Jan 31, 2026
20 checks passed
@unclesp1d3r unclesp1d3r deleted the 129-rustsec-2023-0089-atomic-polyfill-is-unmaintained branch January 31, 2026 05:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

configuration Configuration management and settings documentation Improvements or additions to documentation size:S This PR changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2023-0089: atomic-polyfill is unmaintained

2 participants