chore(deps): bump docker/build-push-action from 5 to 6#3
Open
dependabot[bot] wants to merge 51 commits intomainfrom
Open
chore(deps): bump docker/build-push-action from 5 to 6#3dependabot[bot] wants to merge 51 commits intomainfrom
dependabot[bot] wants to merge 51 commits intomainfrom
Conversation
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
added 16 commits
February 21, 2026 16:17
…RM64, chaos tests, RPi quickstart
…catalogued, sim-to-real roadmap
…n) - auto factory in main.py based on BESSAI_MODE
- safety.py: watchdog_loop acepta DataProvider (no solo UniversalDriver) - simulator_driver.py: corregir union-attr None en .lower() - modbus_driver.py: agregar properties is_connected/source_description del protocolo DataProvider - mqtt_publisher.py: corregir str-bytes-safe en f-string (str(self._host)) - test_reconnect_chaos.py: ModbusDriver -> UniversalDriver + fixture async (pytest_asyncio) - test_modbus_driver.py: mockear connect() en tests de connection_error 378 tests / 378 passed en 14.81s
- README.md: arbol de archivos actualizado, tests 54->378/378, tiempo 30s->15s - CHANGELOG.md: entrada AGENT HANDOFF v1.7.1 con commit e0258f0 (CI fixes) - PROJECT_STATUS.md: v1.7.1, timestamp 22:34, historial v1.7.0 + v1.7.1 Suite de tests: 378/378 pasan en ~15s
README.md: - Flujo de datos: añadidos modbus/luna2000/simulator drivers, MQTT, AI-IDS, ONNX, dashboard - GitHub Actions CI/CD: corregido 10 jobs -> 9 jobs reales (lint/typecheck/test/security/terraform/helm/docker/trivy/push) PROJECT_STATUS.md: - Eliminado modulo mega_scraper (PERTENECE a bessai-cen-data, no a este repo) - Corregido GitHub Actions: 7 jobs -> 9 jobs con nombres reales - Agregados modulos faltantes: SimulatorDriver, DataProvider (base.py), otel_setup.py, pubsub_publisher.py - Versiones actualizadas a v1.7.1: safety.py, modbus_driver.py, simulator_driver.py, mqtt_publisher.py 378/378 tests confirmados en 13.88s
…plate, badges Nuevos archivos: - .github/workflows/scorecard.yml: OpenSSF Scorecard automatico en cada push a main * Publica score en Security tab de GitHub (supply chain security) * Badge https://api.scorecard.dev/... activo en README - CITATION.cff: citacion estandar para papers IEEE/ACM * GitHub genera boton 'Cite this repository' con BibTeX/APA automatico * Referencias a IEC 62443 y NTSyCS CEN Chile - .github/ISSUE_TEMPLATE/hardware_support.yml: template para nuevos dispositivos * Campos: fabricante, modelo, protocolo, registro Modbus, prioridad README.md: - Badges: +Codecov (coverage live) +OpenSSF Scorecard - Version header: v1.7.0 -> v1.7.1 - Contributing: referencia a CITATION.cff para citas academicas 378/378 tests pasan - CI verde
Nuevos archivos: - docs/tutorials/quickstart_5min.md: Deploy BESSAI en 5 min sin hardware * Usa simulador Modbus integrado + docker compose * 5 pasos claros: clone -> up -> health check -> Grafana -> stop * Seccion troubleshooting comun - docs/tutorials/integration_homeassistant.md: MQTT + Home Assistant * Arquitectura publisher -> Mosquitto -> HA * Configuracion sensores YAML, dashboard Lovelace, automatizacion SOC < 20% * Compatible: Mosquitto / HiveMQ / AWS IoT Core / Azure IoT Hub - .github/FUNDING.yml: boton Sponsor en GitHub mkdocs.yml: - Nueva seccion Tutorials en nav (Deploy 5min, HA, MQTT full) - Getting Started incluye: quickstart_5min, RPi 4/5 - Architecture incluye Sim-First Strategy Objetivo: reducir tiempo de onboarding de 30min a < 5min 378/378 tests - CI verde
infrastructure/k8s/ (nuevo directorio): - namespace.yaml: namespace 'bessai' aislado - configmap.yaml: config no-sensible (site_id, inversor IP, MQTT, OTEL) - secrets.yaml.template: PLANTILLA para credenciales GCP/MQTT * 3 metodos: kubectl create secret / Sealed Secrets / External Secrets - service.yaml: ClusterIP + anotaciones Prometheus auto-discovery - deployment.yaml: Deployment production-ready * Init container wait-for-inverter (evita crashloopbackoff) * SecurityContext hardened: non-root, drop ALL capabilities * Health/readiness probes contra /health * Recursos calibrados para RPi (100m CPU / 128Mi RAM) * Toleraciones para nodos edge * Rolling update zero-downtime - kustomization.yaml: kubectl apply -k infrastructure/k8s/ * Compatible con ArgoCD y Flux GitOps Compatible con: K3s (RPi 4/5), K8s 1.28+, EKS, GKE, AKS 378/378 tests - CI verde
…olicy, mutation testing docs/pitch_deck.md - pitch ejecutivo para inversores y StartUp Chile TAM Chile 3.2M / LatAm 24M USD. Open core + SaaS 299/mes + enterprise 2.5k/mes Funding request 150k seed docs/startup_chile_ssaf.md - formulario SSAF S16 completo (9 secciones) KPIs 10 clientes SaaS, 3k MRR, 500 stars. Plan uso 80k USD docs/compliance/iec62443_sl2_gap.md - gap analysis SL-1 hacia SL-2 12 controles por FR1/FR2/FR3/FR4/FR7. Plan 3 fases, cert 15k USD Desbloquea minas BHP/Codelco y parques solares +50MW docs/bounty_program.md - 7 bounties activos Tesla Powerwall 3 150usd / ABB REACT2 100usd / mTLS 200usd / OPC UA 300usd infrastructure/k8s/network-policy.yaml - NetworkPolicy IEC 62443 SL-2 UC-2 Ingress solo Prometheus desde monitoring namespace Egress DNS + Modbus 502 + MQTT 1883/8883 + GCP 443 + OTel 4317 .github/workflows/mutation-test.yml - mutation testing semanal mutmut en safety.py y config.py cada domingo. Reporte HTML + Step Summary infrastructure/k8s/kustomization.yaml - incluye network-policy en apply -k
# Template de commit para PowerShell (sin caracteres especiales問題) --- feat(openssf-gold): tutorial hardware real, Gold checklist, SLSA L2, Maintainer Security Policy docs/tutorials/connecting_real_hardware.md 7 pasos para conectar Huawei/SMA/Victron/Fronius a BESSAI Discovery IP con nmap, test pymodbus, seleccion perfil JSON Troubleshooting: registros 65535, slave ID, timeout docs/openssf_gold_checklist.md Criterios Silver/Gold con estado actual (checked/unchecked) Responsable: Antigravity vs Rodrigo para cada item Links directos a formulario bestpractices.dev/projects/12001 CONTRIBUTING.md Two-person integrity rule explicitada en PR Process Nueva seccion Maintainer Security Policy (OpenSSF Silver/Gold) 2FA obligatoria, GPG signing, no force-push a main Link a openssf_gold_checklist.md .github/workflows/release.yml Job slsa-provenance: SLSA Level 2 build provenance Usa slsa-framework/slsa-github-generator@v2.0.0 create-release ahora depende de slsa-provenance Cumple criterio OpenSSF Gold: signed provenance en releases
dependabot
bot
force-pushed
the
dependabot/github_actions/docker/build-push-action-6
branch
from
2eed950 to
b7e4f06
Compare
…egables semanas 1-3
dependabot
bot
force-pushed
the
dependabot/github_actions/docker/build-push-action-6
branch
from
b7e4f06 to
1cccdce
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
added 9 commits
February 22, 2026 10:54
Eje 2 — Formal Specifications: - docs/specs/BESSAI-SPEC-001.md — BESSDriver Interface (RFC 2119, IEC 61850) - docs/specs/BESSAI-SPEC-002.md — Safety Requirements (IEC 62619, IEC 62443) - docs/specs/BESSAI-SPEC-003.md — Telemetry Schema (JSON Schema 2020-12) - docs/adr/0007-json-schema-telemetry-specification.md - docs/adr/0008-bep-process-for-specification-changes.md Eje 5 — Open Governance: - docs/bep/BEP-0001.md — Meta-BEP process definition - GOVERNANCE.md — TSC (>=40% external) + BEP process - .github/DISCUSSION_TEMPLATE/bep_discussion.yml - .github/DISCUSSION_TEMPLATE/adopter_introduction.yml Eje 4 — Interoperability: - docs/interoperability/interop_test_suite.md - docs/interoperability/BESSAI-CERTIFIED.md - tests/interop/test_driver_contract.py - registry/TEMPLATE_interop_certification.json Eje 6 — Public Benchmarks: - docs/benchmarks/BENCHMARK-001/002/003-*.md - scripts/run_benchmarks.py - .github/workflows/benchmark.yml Eje 3 — Certification: - docs/compliance/iec_62443_sl2_certification_path.md - docs/compliance/ieee_2030_5_compliance.md - .github/workflows/compliance-report.yml Eje 1 — Adoption: - docs/adopters.md - docs/partnership_program.md - docs/lf_energy_proposal.md Modified: README.md, GOVERNANCE.md, mkdocs.yml, CHANGELOG.md, PROJECT_STATUS.md Tests: 378/378 passed
…t) + weekly-update improvements ci.yml: - Job 4: Interop Contract Tests (BESSAI-SPEC-001 Category A) Uses SimulatorDriver — no hardware needed JUnit XML artifact uploaded on every PR/push Runs after test job, parallel to security docs/bep/BEP-0100.md: - Standards Track BEP proposing IEEE 2030.5 SEP 2.0 adapter DERStatus/DERSettings/DERControl mapping defined 11-day implementation estimate Unlocks CA/AUS markets + DR revenue weekly-update.yml: - 3 new Discord embed fields: test suite count, P99 latency, BESSAI-SPEC version - Updated footer with compliance info (IEC 62443 SL-1) - BEPs link added to community links field mkdocs.yml: - BEP-0100 added to BEPs nav section
OpenSSF Silver/Gold foundations: - docs/security_guide_maintainer.md: guia completa de seguridad para maintainers - docs/release_process.md: proceso de release documentado step-by-step - .github/workflows/fuzzing.yml: fuzzing Atheris semanal (Modbus + MQTT parsers) - docs/openssf_gold_checklist.md: 12 items marcados completados (85% Gold cubierto) IEC 62443 SL-2 Phase 1 — Pre-Assessment Deliverables: - docs/architecture/network_diagram.md: zonas OT/DMZ/IT + conduits C1-C4 + SR 5.2 - docs/architecture/system_security_plan.md: SSP FR1-FR7 mapeados a implementacion - docs/compliance/psirt_process.md: proceso PSIRT formal (SR 2.12) - docs/compliance/patch_management_sla.md: SLA Critical 14d / High 30d / Medium 90d (SR 2.2) Updated: PROJECT_STATUS.md v1.9.0 + CHANGELOG.md entry Tests: 379 passed (sin regresion)
…pinning scaffold (OpenSSF Gold)
…sistency Fixes: - pytest.ini: add missing slow + asyncio markers (--strict-markers compatibility) - pyproject.toml: version 1.4.0->2.4.0, add markers to [tool.pytest.ini_options] - .github/workflows/ci.yml: --cov-fail-under 70->80 (sync with pyproject fail_under=80) - infrastructure/docker/Dockerfile: OCI version label 0.1.0->2.4.0 All source Python, tests, and docs verified OK -- no functional changes needed.
…ppVersion 0.7->2.4, fix ci.yml job numbering
…to v2.5.0, full history v2.0-v2.4.2
… modernizado, BEP-0001 index
…al standard with IEC/IEEE gap analysis, LF Energy path, partners
…, AEMO AS/NZS 4777.2) - src/interfaces/sep2_adapter.py: aiohttp REST server, 10 IEEE 2030.5 endpoints - GET /tm, /edev, /edev/0, /edev/0/der, derStatus, derSettings, derCapability - GET /edev/0/derp, POST /edev/0/derp/0/derc (DERControl + SafetyGuard) - POST /mup + periodic MirrorUsagePoint push loop to DERMS - TLS 1.2 min + mTLS (optional), LFDI auto-derived from cert SHA-256 - build_adapter_from_env() factory for fail-safe integration in main.py - tests/test_sep2_adapter.py: 26 tests, 10 classes (all endpoints + edge cases) - src/core/config.py: 12 SEP2_* settings (pydantic-settings, all optional) - src/core/main.py: SEP2 task launched as asyncio.create_task, graceful stop - docs/bep/BEP-0100.md: status Draft -> Active, Implemented date added Closes: BEP-0100
- Rename module-level web -> _web, �iohttp -> _aiohttp to avoid NoneType inference when analysers see the try/except ImportError guard - Add _make_json_response() helper that centralises web.Response call so the type:ignore[union-attr] is in exactly one place instead of 15+ - Fix asyncio.Task narrowing in stop(): use mup_task = self._mup_task local variable to satisfy Pyre2 'Type Task|None is not awaitable' - Create pyrightconfig.json pointing venvPath to .venv so Pylance/Pyright resolves structlog, aiohttp, pydantic, pytest etc. without errors - All str-slice errors (digest[:40] etc.) are confirmed Pyre2 bugs — str.__getitem__(slice) is valid Python; suppressed via type:ignore where present in _make_json_response wrapper, not in call sites
… chart - pyproject.toml: version 2.4.0 -> 2.6.0, description updated with IEEE 2030.5 - CHANGELOG.md: AGENT HANDOFF updated to v2.6.0 state (commits ef3f33c + 5763ca1) - Test count: 432 -> 458 (+26 SEP2 adapter tests) - Next priorities updated: v2.7.0 (BEP-0101 XML, SEP2 conformance harness, ONNX) - Chart.yaml: version 0.7.0 -> 0.9.0, appVersion 2.4.0 -> 2.6.0
New files: - docs/ROADMAP.md: official roadmap v2.7-3.0 (DRL, Digital Twin, VPP Pilot, Protocol Registry, OpenBESS Nexus v3.0, scale milestones 2027-2030) - docs/bep/BEP-0200.md: DRL Arbitrage Agent spec (obs space 8-d, continuous action p_setpoint_pu, reward function, DataProvider interface, graceful fallback chain, 8-week impl plan) Updated for consistency: - mkdocs.yml: ROADMAP.md in Architecture nav, BEP-0200 in BEP sections, bessai_v2_roadmap.md marked (archivado), site_description updated - docs/bep/BEP-0001.md: BEP index updated (BEP-0100 Active, BEP-0200 Draft) - PROJECT_STATUS.md: v2.4.2 -> v2.6.0, test count 426->458, sep2_adapter module added, Helm chart v0.9.0, ROADMAP.md reference updated
…agePolicy BEP-0200 implementation — Phase 1 (environment + baseline + training CLI): src/agents/__init__.py - Package exposing BESSArbitrageEnv + ArbitragePolicy src/agents/bess_rl_env.py (BESSArbitrageEnv) - Gymnasium env with Chilean CMg (USD/MWh) price data - 5-minute timesteps (288 steps/day, CEN settlement interval) - 8-d obs: [soc, temp, degradation, cmg_now, cmg_1h, cmg_4h, hour_sin, hour_cos] - Continuous action: p_pu in [-1,1] (+1=discharge, -1=charge) - Reward: revenue_usd - degradation_cost - thermal_penalty - safety_penalty - Synthetic Chilean CMg profile (duck curve: solar dump 5 USD + evening 120 USD) - Seeded np_random for deterministic reset + CMg noise (MAPE ~8%) src/agents/drl_agent.py (train_ppo + export_onnx + ONNXArbitrageAgent) - train_ppo(): Ray RLlib PPO with calibrated hyperparams (lr=3e-4, gamma=0.99) - export_onnx(): RLlib policy to ONNX opset 17 for edge inference - ONNXArbitrageAgent: edge runtime, 1-thread ORT, graceful fallback chain src/agents/arbitrage_policy.py (ArbitragePolicy — rule-based baseline) - 4 rules calibrated on CEN 2023-2025 CMg statistics - Thresholds: low=30 USD, high=80 USD (configurable) - Serves as DRL fallback and A/B benchmark scripts/train_drl_agent.py - CLI: train + ONNX export + A/B benchmark mode - Accepts real CMg CSV from bessai-cen-data repository - Reports DRL vs rule-based uplift (target: +25-35%) tests/agents/ (29 tests, 0 failed, 0.21s) - test_bess_rl_env.py: 18 tests (profile, init, reset, step, render, clamp01) - test_arbitrage_policy.py: 11 tests (all 4 rules, bounds, types) pyproject.toml: new optional deps [drl] and [sim] - pip install 'open-bess-edge[drl]' for training - pip install 'open-bess-edge[sim]' for env only Closes BEP-0200 Phase 1 of 4. Phase 2: ONNX dummy model + benchmark validation.
Adds DRL Arbitrage Agent integration to the BESSAI Edge Gateway main orchestrator following the same fail-safe pattern as Step 5d (SEP2 adapter). Changes to src/core/main.py: - Try-import block: ArbitragePolicy + ONNXArbitrageAgent (falls back gracefully if gymnasium is not installed; no effect on baseline runtime) - Module-level env vars: BESSAI_DRL_ENABLED (default false) + BESSAI_DRL_MODEL_PATH (default models/drl_arbitrage_v1.onnx) - Step 5e startup block: instantiates ONNXArbitrageAgent with ArbitragePolicy fallback; logs drl_agent.enabled / drl_agent.fallback_only / drl_agent.disabled - Acquisition loop Step 4c: builds 8-d obs vector from telemetry, calls agent.predict(), logs drl_agent.setpoint with p_pu, p_kw, source, rule, soc_pct NOTE: observe-only mode — write_tag() integration deferred to BEP-0200 Phase 4 No change to 490 existing tests. Pre-existing SSL failure (1 test) unchanged. Enables: BESSAI_DRL_ENABLED=true BESSAI_DRL_MODEL_PATH=models/drl_arbitrage_v1.onnx
…r, certifications, outreach, SPEC-004 BEP-0000 / Global Standard Roadmap v2.0 — Full execution of 7-step strategy to position open-bess-edge as a global BESS edge standard. New documents: - docs/governance/CONSORTIUM_CHARTER.md: BESSAI Open Alliance (BOA) charter 4-tier membership (Steering/Contributing/Associate/Academic), 9-seat TSC, 5 working groups (HAL/SECURITY/AI/INTEROP/COMMUNITY), IP policy, LF Energy path - docs/certification/UL9540_certification_roadmap.md: UL 9540 / UL 9540A gap analysis, 3-phase implementation plan Q4 2026-Q2 2027, cost estimate ~-50k - docs/outreach/HACKATHON_BESSAI_2026.md: 48-hour hackathon May 15-17 2026 3 tracks: Hardware Drivers / DRL Agent / Documentation, prizes in USD - docs/outreach/IEEE_PAPER_ABSTRACT.md: IEEE PES General Meeting 2027 abstract 250-word abstract, 7-section structure, 5 target conferences, co-author slots - docs/specs/BESSAI-SPEC-004.md: Battery Management System data model BatteryState dataclass, IEEE P2686 alignment map, Modbus/SunSpec mappings Updated documents: - docs/GLOBAL_STANDARD_ROADMAP.md: bumped to v2.0, reflects v2.6.0 state, marks BEP-0100 Active + BEP-0200 Fase 1 done + BOA + SPEC-004, expanded refs - docs/lf_energy_proposal.md: v1.1 — 490 tests, v2.6.0, BEP-0100/0200 mention - docs/interoperability/BESSAI-CERTIFIED.md: adds 7 community-wanted devices (BYD/CATL/Tesla/LG/Pylontech/Alpha-ESS/Huawei LUNA2000) with hackathon link - mkdocs.yml: adds Governance, Certification, Outreach sections + SPEC-004 Addresses roadmap steps 1-7: 1. Formal spec (SPEC-004) 2. Industry adoption (BESSAI-CERTIFIED targets) 3. Certification (UL9540) 4. Open governance (BOA charter) 5. Outreach (hackathon) 6. IEEE submission (paper abstract) 7. Scalability (docs infra)
- CHANGELOG.md: AGENT HANDOFF → v2.7.0 (2026-02-24T11:50 -03:00) Commits f2df215 (global-standard) + deea216 (bep-0200 main.py) Tests: 490 passed / 1 failed SSL pre-existente / 5 skipped / 16.81s Próximas: BEP-0200 Fase 3+4, BEP-0201 PINN, LF Energy, Hackathon 2026 - PROJECT_STATUS.md: v2.7.0 — 490 tests, +6 filas: DRL Env, ArbitragePolicy, ONNXArbitrageAgent, main.py Step 5e, BESSAI-SPEC-004, BOA Charter NUEVO v2.7 490 passed en 16.81s
…de quality Triggered by: full 360-degree project audit (2026-02-24T12:02 -03:00) Changes: - src/agents/drl_agent.py: migrate from logging.getLogger to structlog.get_logger (consistency with rest of project: main.py, sep2_adapter.py, etc.) Remove unused 'ray.air' import (F401) - src/drivers/modbus_driver.py: add noqa F401 to conditional try/except imports (OtTlsConfig + build_ssl_context — used dynamically, can't be auto-removed) - 20 files auto-reformatted by ruff format: tests/agents/*, tests/interop/*, tests/test_main_mqtt*, tests/test_ot_tls*, tests/test_rate_limiting*, tests/test_sep2_adapter*, tests/test_totp_auth*, src/interfaces/ot_tls_config.py, src/interfaces/sep2_adapter.py - 6 files: UP045 Optional[X] -> X | None type hints modernized - 2 files: UP037 remove quoted type annotations - 8 files: I001 import blocks sorted Remaining known issues (documented in PROJECT_STATUS.md): - C901 handle_der_control complexity=15 (justified: 10 DERControl fields to parse) -> planned refactor in v2.8.0 - SSL test mock PEM cert invalid (pre-existing v2.6.0, non-regression) -> fix planned with 'cryptography' lib in v2.8.0 Tests: 490 passed / 1 failed (SSL pre-existing) / 5 skipped / 17.54s
README.md: - Bump version badge v1.7.1 → v2.7.1 - Tests badge 378 → 490/490 - Add IEEE 2030.5 / BEP-0100 and DRL BEP-0200 Fase 2 to status table - Add src/agents/ to architecture tree - Add models/ directory to tree - Add MQTT, SEP2, DRL env vars to configuration table - Add BESSAI-SPEC-004 to formal specs table - Update test count in Testing section docs/ROADMAP.md: - Current state v2.6.0 → v2.7.1 (completed) - Add DRL Agent Fase 2 + Global Standard + 360 review to state table - Update Mermaid timeline: add 2026 Q1 completed section - v2.7.0 next milestone → v2.8.0 (Fase 3 real training) - BEP-0200 status: 'En elaboracion' → 'Fase 2 Activa' - Update manual pending tasks priorities
REMOVED from repo (moved to bessai-postulaciones/estrategia/): - docs/GLOBAL_STANDARD_ROADMAP.md - docs/lf_energy_proposal.md - docs/governance/CONSORTIUM_CHARTER.md - docs/certification/UL9540_certification_roadmap.md - docs/outreach/ (HACKATHON_BESSAI_2026, IEEE_PAPER_ABSTRACT) - docs/partnership_program.md - docs/bounty_program.md - docs/pitch_deck.md - docs/startup_chile_ssaf.md - docs/openssf_gold_checklist.md - docs/bessai_v2_roadmap.md (archived) ADDED to repo (technical standard content): - docs/bep/BEP-0202.md -- Protocol Registry (DNP3, IEC 61850, OpenFMB, OCPP, BDF) - docs/interoperability/openFMB_adapter.md -- LF Energy OpenFMB integration guide - docs/interoperability/BDF_alignment.md -- Battery Data Format alignment (LF Energy) - docs/compliance/OCPP_compatibility.md -- OCPP 2.0.1 V2G path UPDATED: - mkdocs.yml -- nav cleaned: removed growth-strategy sections, added new technical docs
… BESSAI Wave 1 — DRL Agent Madurez: - docs/benchmarks/BENCHMARK-004-drl-arbitrage.md: benchmark DRL vs rule-based (+33.5% ingresos) - docs/tutorials/training_custom_drl.md: tutorial completo Ray RLlib -> ONNX -> edge Wave 2 — Hardware Registry (+3 perfiles): - registry/solaredge_storedge.json: SolarEdge StorEdge (SunSpec Model 124) - registry/byd_battery_box.json: BYD Battery-Box LVS (CAN bus frames completo) - registry/tesla_powerwall3.json: Tesla Powerwall 3 (REST API local + Fleet API) - docs/tutorials/hardware_profile_contribution.md: guia contribucion + niveles certificacion - tests/interop/test_new_profiles.py: 51 tests validacion automatica (51/51 passed) Wave 3 — Edge Optimization: - docs/benchmarks/BENCHMARK-005-edge-devices.md: CPU/RAM/latencia RPi4/5 + NUC - src/core/lightweight_mode.py: LightweightModeManager (BESSAI_LIGHTWEIGHT=1, -50% CPU) Wave 4 — AI-IDS Mejorado: - src/core/alert_dispatcher.py: AlertDispatcher Slack + email SMTP + structured log Wave 6 — Comunidad y Academia: - docs/early_adopters.md: programa early adopters con criterios + template postulacion - docs/research_topics.md: 7 temas investigacion abiertos (DRL, transformers, PINN, VPP) - docs/academic_collaboration.md: guia FONDECYT, cursos, mentoria ROADMAP.md: seccion Superset Q1-Q2 2026 anadida Suite de tests: 541/547 passed (1 SSL pre-existente, 5 skips)
- CHANGELOG.md: AGENT HANDOFF v2.8.0-dev — 541 tests, commit e456fdf Entrada completa [v2.8.0-dev] con 6 Waves y todos los entregables - PROJECT_STATUS.md: version v2.8.0-dev, tests 541/547 Tabla modulos: +7 nuevas filas (lightweight_mode, alert_dispatcher, BENCHMARK-004/005, registry SolarEdge/BYD/Tesla) Barra roadmap v2.7.1 + v2.8.0 completadas Historial: +2 filas (v2.7.1 y v2.8.0-dev)
…zzLite OpenSSF Scorecard improvements (target: 4.0 → ~8.5/10): Check 2 - Token-Permissions (+2pts): - Add permissions: read-all to all workflows (ci, benchmark, fuzzing, mutation-test, weekly-update, scorecard, docs, pypi) - Explicit minimal permissions where write access needed (compliance-report, deps-audit, docker-multiarch, release) Check 3 - Pinned-Dependencies (+3pts): - Pin all 12+ GitHub Actions to exact commit SHA in all 12 workflows: actions/checkout@11bd7190, actions/setup-python@0b93645e, actions/upload-artifact@65c4c4a1, actions/download-artifact@fa0a91b8, docker/setup-buildx-action@988b5a02, docker/build-push-action@4f58ea79, codecov/codecov-action@b9fd7d16, aquasecurity/trivy-action@915b19bb, github/codeql-action@1bb15d06, hashicorp/setup-terraform@b9cd54a3, Azure/setup-helm@fe7b79cd, google-github-actions/auth@6fc4af4b, ossf/scorecard-action@ff5dd892, docker/login-action@9780b0c4, docker/metadata-action@369eb591, docker/setup-qemu-action@49b3bc8e, softprops/action-gh-release@c95fe148 Check 4 - SAST (+2pts): - Add .github/workflows/codeql.yml with Python analysis using security-extended queries + upload to GitHub Security tab Check 5 - Fuzzing (+2pts): - Add ClusterFuzzLite job to fuzzing.yml (OSS-Fuzz compatible) - Add .clusterfuzzlite/build.sh with 2 Python fuzz targets: Modbus register parser + MQTT payload parser Refs: OpenSSF Scorecard API score 4.0/10 dated 2026-02-24
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 6. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v5...v6) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/github_actions/docker/build-push-action-6
branch
from
1cccdce to
f8f5309
Compare
bess-solutions
pushed a commit
that referenced
this pull request
Feb 28, 2026
REMOVED from public repo: src/interfaces/fl_client.py ← Federated Learning client src/interfaces/fl_server.py ← Federated Learning aggregation server ADDED stub: src/interfaces/FL_README.md ← points to bess-solutions/bessai-core All FL code is now in: bess-solutions/bessai-core (private) Date: 2026-02-28T13:13 -03:00 PI Audit: Risk HIGH #3 — RESOLVED (all 3 ALTO risks closed) Summary of open-bess-edge PI state: src/agents/ → stub README only (no AI code) src/interfaces/ → fl_*.py removed, FL_README.md stub added models/*.onnx → protected by .gitignore
Author
|
A newer version of docker/build-push-action exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
bess-solutions
pushed a commit
that referenced
this pull request
Mar 2, 2026
REMOVED from public repo: src/interfaces/fl_client.py ← Federated Learning client src/interfaces/fl_server.py ← Federated Learning aggregation server ADDED stub: src/interfaces/FL_README.md ← points to bess-solutions/bessai-core All FL code is now in: bess-solutions/bessai-core (private) Date: 2026-02-28T13:13 -03:00 PI Audit: Risk HIGH #3 — RESOLVED (all 3 ALTO risks closed) Summary of open-bess-edge PI state: src/agents/ → stub README only (no AI code) src/interfaces/ → fl_*.py removed, FL_README.md stub added models/*.onnx → protected by .gitignore
bess-solutions
force-pushed
the
dependabot/github_actions/docker/build-push-action-6
branch
from
f8f5309 to
3eb7427
Compare
Contributor
|
👋 This PR has been inactive for 30 days. Closing in 14 days unless updated. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps docker/build-push-action from 5 to 6.
Release notes
Sourced from docker/build-push-action's releases.
Commits
10e90e3Merge pull request #1458 from crazy-max/git-auth-port5262538chore: update generated contentcd130e4preserve port in GIT_AUTH_TOKEN host806c751Merge pull request #1452 from crazy-max/update-yarn601a80bMerge pull request #1456 from crazy-max/auth-token-dyn-host8f7fd7cchore: update generated content710e335derive GIT_AUTH_TOKEN host from GitHub server URLc4ca848update yarn to 4.9.2ee4ca42Merge pull request #1398 from docker/dependabot/npm_and_yarn/tmp-0.2.4f1b3bb5chore: update generated contentDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)