Scorecard supply-chain security

Workflow runs for Scorecard supply-chain security

• chore: release v3.10.0 (#1440)

  completed successfully:
  Scorecard supply-chain security#516:Commit53e64a9pushedbytsarlandie-oai
  main

  Nov 12, 202648s
  More actions for workflow run 516

• chore: release v3.10.0

  failed:
  Scorecard supply-chain security#515:Pull request#1440synchronizebygithub-actions[bot]Bot
  release-plz-2026-11-08T15-54-22Z

  Nov 12, 20267h 6m 20s
  More actions for workflow run 515

• docs(macros): document the Send limitation on async #[tool]/#[prompt]…

  completed successfully:
  Scorecard supply-chain security#514:Commitea1ad03pushedbyDaleSeo
  main

  Nov 12, 20261m 5s
  More actions for workflow run 514

• Add opt-in BM25 tool search for large catalogs

  requires action with the application:
  Scorecard supply-chain security#513:Pull request#1449synchronizebyCopilotAI
  copilot/feat-built-in-tool-search

  Nov 12, 2026Action required
  More actions for workflow run 513

• Add opt-in BM25 tool search for large catalogs

  requires action with the application:
  Scorecard supply-chain security#512:Pull request#1449openedbyCopilotAI
  copilot/feat-built-in-tool-search

  Nov 12, 2026Action required
  More actions for workflow run 512

• fix: reject unadvertised capability methods by default

  completed successfully:
  Scorecard supply-chain security#511:Pull request#1446synchronizebyxixi-box
  xixi-box:fix/issue-1445-f852ec0-6401d18d

  Nov 12, 202624s
  More actions for workflow run 511

• fix: reject unadvertised capability methods by default

  completed successfully:
  Scorecard supply-chain security#510:Pull request#1446synchronizebyxixi-box
  xixi-box:fix/issue-1445-f852ec0-6401d18d

  Nov 12, 20264m 28s
  More actions for workflow run 510

• fix: reject unadvertised capability methods by default

  completed successfully:
  Scorecard supply-chain security#509:Pull request#1446synchronizebyxixi-box
  xixi-box:fix/issue-1445-f852ec0-6401d18d

  Nov 12, 202622s
  More actions for workflow run 509

• fix(streamable-http-server): keep slow per-request-negotiated SSE calls alive

  requires action with the application:
  Scorecard supply-chain security#508:Pull request#1421synchronizebyaramalipoor
  aramalipoor:fix/negotiated-sse-keep-alive

  Nov 12, 2026Action required
  More actions for workflow run 508

• fix: reject unadvertised capability methods by default

  completed successfully:
  Scorecard supply-chain security#507:Pull request#1446synchronizebyxixi-box
  xixi-box:fix/issue-1445-f852ec0-6401d18d

  Nov 12, 202621s
  More actions for workflow run 507

• fix: reject unadvertised capability methods by default

  completed successfully:
  Scorecard supply-chain security#506:Pull request#1446synchronizebyxixi-box
  xixi-box:fix/issue-1445-f852ec0-6401d18d

  Nov 12, 202620s
  More actions for workflow run 506

• fix: reject unadvertised capability methods by default

  completed successfully:
  Scorecard supply-chain security#505:Pull request#1446openedbyxixi-box
  xixi-box:fix/issue-1445-f852ec0-6401d18d

  Nov 11, 202619s
  More actions for workflow run 505

• chore: release v3.10.0

  requires action with the application:
  Scorecard supply-chain security#504:Pull request#1440synchronizebygithub-actions[bot]Bot
  release-plz-2026-11-08T15-54-22Z

  Nov 11, 2026Action required
  More actions for workflow run 504

• fix: preserve tools with dependency property-name maps (#1428)

  completed successfully:
  Scorecard supply-chain security#503:Commitf852ec0pushedbyDaleSeo
  main

  Nov 11, 202654s
  More actions for workflow run 503

• fix(auth): omit scope on refresh unless caller sets one

  requires action with the application:
  Scorecard supply-chain security#502:Pull request#1433synchronizebyno-hup
  no-hup:fix/oauth-refresh-scope

  Nov 11, 2026Action required
  More actions for workflow run 502

• fix(transport): bound buffered Streamable HTTP responses

  requires action with the application:
  Scorecard supply-chain security#501:Pull request#1246synchronizebyGTanger
  GTanger:fix/streamable-http-response-limits

  Nov 11, 2026Action required
  More actions for workflow run 501

• fix(transport): accept any 2xx reply for notification-only POSTs

  requires action with the application:
  Scorecard supply-chain security#500:Pull request#1424synchronizebyBlueX888
  BlueX888:fix/accept-2xx-for-notification-posts

  Nov 11, 2026Action required
  More actions for workflow run 500

• fix(transport): accept any 2xx reply for notification-only POSTs

  requires action with the application:
  Scorecard supply-chain security#499:Pull request#1424synchronizebyBlueX888
  BlueX888:fix/accept-2xx-for-notification-posts

  Nov 11, 2026Action required
  More actions for workflow run 499

• fix(transport): retain terminal cause for startup failures (#1441)

  completed successfully:
  Scorecard supply-chain security#498:Pull request#1444synchronizebyip2a
  ip2a:fix/1441-terminal-cause

  Nov 11, 202621s
  More actions for workflow run 498

• fix(transport): retain terminal cause for startup failures (#1441)

  completed successfully:
  Scorecard supply-chain security#497:Pull request#1444synchronizebyip2a
  ip2a:fix/1441-terminal-cause

  Nov 11, 202621s
  More actions for workflow run 497

• fix(transport): retain terminal cause for startup failures (#1441)

  completed successfully:
  Scorecard supply-chain security#496:Pull request#1444synchronizebyip2a
  ip2a:fix/1441-terminal-cause

  Nov 11, 202620s
  More actions for workflow run 496

• fix(transport): retain terminal cause for startup failures (#1441)

  completed successfully:
  Scorecard supply-chain security#495:Pull request#1444synchronizebyip2a
  ip2a:fix/1441-terminal-cause

  Nov 11, 202622s
  More actions for workflow run 495

• fix(transport): retain terminal cause for startup failures (#1441)

  completed successfully:
  Scorecard supply-chain security#494:Pull request#1444synchronizebyip2a
  ip2a:fix/1441-terminal-cause

  Nov 11, 202620s
  More actions for workflow run 494

• fix(transport): retain terminal cause for startup failures (#1441)

  completed successfully:
  Scorecard supply-chain security#493:Pull request#1444synchronizebyip2a
  ip2a:fix/1441-terminal-cause

  Nov 11, 202622s
  More actions for workflow run 493

• fix(transport): retain terminal cause for startup failures (#1441)

  completed successfully:
  Scorecard supply-chain security#492:Pull request#1444synchronizebyip2a
  ip2a:fix/1441-terminal-cause

  Nov 11, 202621s
  More actions for workflow run 492