mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-30 05:16:50 +01:00
## Thinking Path > - Paperclip uses a dependency lock for reproducible builds. > - Dependency changes on master need matching lock entries. > - Paid eval reports also pin a reviewed offline correction. > - Reports must install before paid model work starts. > - This automated PR keeps the lock and report proof together. ## Linked Issues or Issue Description **What happened?** Dependency manifests on master changed after the last committed lock refresh. **Expected behavior** Frozen installs must match those manifests. Eval reports must retain matching offline lock proof. **Steps to reproduce** Run a frozen install before and after this lock refresh. ## What Changed - Refresh the dependency lock from the manifests on master. - Include the matching offline report correction and hashes. ## Verification - Pinned pnpm resolution completed with lifecycle scripts disabled. - The report proof refresh accepted the reviewed committed baseline. - Required PR checks and reviews must pass before merge. ## Risks Dependency changes require review. Unknown report lock baselines remain blocked. This update changes no permissions or paid enable gates. ## Model Used None — generated by pnpm and the deterministic report-lock updater. ## Checklist - [x] Thinking path and problem description included - [x] Generated lock and matching report proof included - [ ] Required CI checks and reviews pass Co-authored-by: lockfile-bot <lockfile-bot@users.noreply.github.com>
7 lines
400 B
JSON
7 lines
400 B
JSON
{
|
|
"inputSha256": "1763d29dec14d421da047d72d70ef33d4c8aa2f1cf85e5a9c8bec7abab32de1d",
|
|
"outputSha256": "9ff59e999e04e41e9c323c13129d222cd59507b7447f661666df29d87072bfbc",
|
|
"patchSha256": "593265c8df6ae366b525a61a321ffeadbe355d713978608f7e757de867ba4059",
|
|
"basis": "Generated with the trusted master lockfile refresh. Review this offline correction and its hashes with the dependency changes."
|
|
}
|