Open-VCS
diff --git a/‎.github/workflows/codeql.yml‎
Lines changed: 3 additions & 3 deletions b/‎.github/workflows/codeql.yml‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎.github/workflows/development.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/development.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/workflows/nightly.yml‎
Lines changed: 5 additions & 8 deletions b/‎.github/workflows/nightly.yml‎
Lines changed: 5 additions & 8 deletions
diff --git a/‎.github/workflows/opencode-review.yml‎
Lines changed: 53 additions & 0 deletions b/‎.github/workflows/opencode-review.yml‎
Lines changed: 53 additions & 0 deletions
diff --git a/‎.github/workflows/opencode.yml‎
Lines changed: 53 additions & 0 deletions b/‎.github/workflows/opencode.yml‎
Lines changed: 53 additions & 0 deletions
diff --git a/‎.github/workflows/publish-stable.yml‎
Lines changed: 5 additions & 8 deletions b/‎.github/workflows/publish-stable.yml‎
Lines changed: 5 additions & 8 deletions
@@ -54,7 +54,7 @@ jobs:
           submodules: recursive
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3
+        uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -65,9 +65,9 @@ jobs:
 
       - name: Autobuild
         if: matrix.build-mode == 'autobuild'
-        uses: github/codeql-action/autobuild@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3
+        uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v3
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3
+        uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v3
         with:
           category: "/language:${{ matrix.language }}"
@@ -58,7 +58,7 @@ jobs:
 
       # ---------- Frontend: lint + typecheck ----------
       - name: Setup Node
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: '20'
           cache: 'npm'
@@ -99,7 +99,7 @@ jobs:
           pkg-config --modversion javascriptcoregtk-4.1
 
       - name: Rust cache
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
         continue-on-error: true
 
       - name: Cargo fmt (check)
 
@@ -21,7 +21,7 @@ env:
   # Scheduled runs should always build from Dev. Manual runs should build from the selected branch.
   TARGET_REF: ${{ github.event_name == 'workflow_dispatch' && github.ref_name || 'Dev' }}
   # Flatpak is enabled in CI.
-  OPENVCS_ENABLE_FLATPAK: '1'
+  OPENVCS_ENABLE_FLATPAK: '0'
 
 jobs:
   check-changes:
@@ -156,7 +156,7 @@ jobs:
 
       # ---------- Frontend ----------
       - name: Setup Node
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: '20'
           cache: 'npm'
@@ -176,9 +176,6 @@ jobs:
         with:
           components: rustfmt, clippy
 
-      - name: Add WASI target
-        run: rustup target add wasm32-wasip1
-
       - name: Setup sccache
         uses: mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
 
@@ -224,14 +221,14 @@ jobs:
 
       - name: Upload Flatpak bundle (artifact)
         if: matrix.platform == 'ubuntu-24.04' && env.OPENVCS_ENABLE_FLATPAK == '1' && hashFiles('packaging/flatpak/io.github.jordonbc.OpenVCS.yml') != ''
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: OpenVCS-flatpak-nightly
           path: OpenVCS.flatpak
 
       # ---------- Cache ----------
       - name: Rust cache
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
 
       - name: Cargo fmt (check)
         run: cargo fmt --all -- --check
@@ -258,7 +255,7 @@ jobs:
 
       # ---------- Build & publish ----------
       - name: Build and publish Nightly prerelease
-        uses: tauri-apps/tauri-action@73fb865345c54760d875b94642314f8c0c894afa # action-v0.6.1
+        uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # action-v0.6.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           FRONTEND_SKIP_BUILD: '1'
 
@@ -0,0 +1,53 @@
+name: opencode-review
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  review:
+    if: github.event.pull_request.user.login == 'Jordonbc'
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+      pull-requests: write
+      issues: write
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+
+      - name: primary
+        id: review_primary
+        continue-on-error: true
+        uses: anomalyco/opencode/github@2410593023d2c61f05123c9b0faf189a28dfbeee
+        env:
+          OPENCODE_API_KEY: ${{ secrets.ZEN_API_KEY }}
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          model: ${{ vars.OPENCODE_REVIEW_MODEL }}
+          use_github_token: true
+          prompt: |
+            Review this pull request:
+            - Check for code quality issues
+            - Look for potential bugs
+            - Suggest improvements
+
+      - name: fallback
+        if: steps.review_primary.outcome == 'failure'
+        uses: anomalyco/opencode/github@2410593023d2c61f05123c9b0faf189a28dfbeee
+        env:
+          OPENCODE_API_KEY: ${{ secrets.ZEN_API_KEY }}
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          model: ${{ vars.OPENCODE_REVIEW_MODEL_FALLBACK }}
+          use_github_token: true
+          prompt: |
+            Review this pull request:
+            - Check for code quality issues
+            - Look for potential bugs
+            - Suggest improvements
@@ -0,0 +1,53 @@
+name: opencode
+
+on:
+  issue_comment:
+    types: [created, edited]
+  pull_request_review_comment:
+    types: [created, edited]
+
+jobs:
+  opencode:
+    if: |
+      github.actor == 'Jordonbc' && (
+        startsWith(github.event.comment.body, '/oc') ||
+        contains(github.event.comment.body, '\n/oc') ||
+        startsWith(github.event.comment.body, '/opencode') ||
+        contains(github.event.comment.body, '\n/opencode')
+      )
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
+      issues: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          persist-credentials: true
+
+      - name: primary
+        id: opencode_primary
+        continue-on-error: true
+        # Pinned to an immutable commit for CodeQL (tag: github-v1.2.17)
+        uses: anomalyco/opencode/github@2410593023d2c61f05123c9b0faf189a28dfbeee
+        env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          OPENCODE_API_KEY: ${{ secrets.ZEN_API_KEY }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          model: ${{ vars.OPENCODE_DEFAULT_MODEL }}
+
+      - name: fallback
+        if: steps.opencode_primary.outcome == 'failure'
+        # Pinned to an immutable commit for CodeQL (tag: github-v1.2.17)
+        uses: anomalyco/opencode/github@2410593023d2c61f05123c9b0faf189a28dfbeee
+        env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          OPENCODE_API_KEY: ${{ secrets.ZEN_API_KEY }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          model: ${{ vars.OPENCODE_DEFAULT_MODEL_FALLBACK }}
@@ -15,7 +15,7 @@ jobs:
       SCCACHE_GHA_ENABLED: 'true'
       SCCACHE_CACHE_SIZE: '2G'
       # Flatpak is enabled in CI.
-      OPENVCS_ENABLE_FLATPAK: '1'
+      OPENVCS_ENABLE_FLATPAK: '0'
     strategy:
       fail-fast: false
       matrix:
@@ -46,7 +46,7 @@ jobs:
 
       # ---------- Frontend (Node + Vite) ----------
       - name: Setup Node
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: '20'
           cache: 'npm'
@@ -66,9 +66,6 @@ jobs:
         with:
           components: rustfmt, clippy
 
-      - name: Add WASI target
-        run: rustup target add wasm32-wasip1
-
       - name: Setup sccache
         uses: mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
 
@@ -121,14 +118,14 @@ jobs:
 
       - name: Upload Flatpak bundle (artifact)
         if: matrix.platform == 'ubuntu-24.04' && env.OPENVCS_ENABLE_FLATPAK == '1' && hashFiles('packaging/flatpak/io.github.jordonbc.OpenVCS.yml') != ''
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: OpenVCS-flatpak-stable
           path: OpenVCS.flatpak
 
       # ---------- Cargo caching ----------
       - name: Rust cache
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
 
       - name: Cargo fmt (check)
         run: cargo fmt --all -- --check
@@ -138,7 +135,7 @@ jobs:
 
       # ---------- Build & publish with Tauri action ----------
       - name: Build and create GitHub Release (draft)
-        uses: tauri-apps/tauri-action@73fb865345c54760d875b94642314f8c0c894afa # action-v0.6.1
+        uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # action-v0.6.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # We already built the Frontend; tell Backend/Tauri to skip any beforeBuildCommand