Sourced from NDDev-OpenNetwork/github-actions/actions/ci-feedback's changelog.

Changelog

Unreleased

• Provider v0.1.5-nddev.130 is .129 rebuilt on the raised AWS SDK minor and patch releases. No provider behaviour changes; the version moves because the binary does, and the release manifest records which source commit and which bytes. Root go.mod changes cannot ship under the previous derivative version - that is how two hosts once ran different binaries under one name.

• Observer schema 17 labels the oldest queued waiter per scale set and the oldest assigned waiter with journal job_id. lifecycle_queued_delivery_stall, queue_wait_slow_burn and lifecycle_assigned_stall aggregate max by (job_id, scale_set) so {subject} is that GUID. A cancelled or advanced waiter dropping out of the gauge is a new incident, not a quieter reading of the previous one. The global Telegram template is unchanged. queue_started_wait_slow_burn still names the scale set. Deploy the observer before reconciling OpenObserve: the assigned stall stream is new.

• GARM v0.2.1-nddev.94 binds stale scale-set job mutation to exact identity: check-run external_id, workflow_job.check_run_url, repository, exact attempt, numeric job ID and source SHA. A job name is never terminal proof. Missing fields, incomplete pagination, omitted or changing page totals, another attempt, a non-Actions producer and no exact match retain the intent. check_run_url and the check URL must share an https origin and repos/{owner}/{repo}/check-runs/{id} path; a missing check URL or a foreign host does not bind. GitHub 404 retains the intent and does not start the 15-minute access-refusal backoff used for 403/429. Scaling uses the latest MESSAGE statistics.TotalAssignedJobs; idle retirement requires a recent MESSAGE with messageID > 0 and re-checks that observation before RemoveRunner. Session-create zeros and 202/nil long-polls are not idle evidence. Start failure deletes the new message session and cancels the listener context. Listener JobCompleted with an empty runner name ends a delivery reservation and is not a REST workflow-job terminal; REST still-queued exact identity can clear that tombstone. A later same-run/name GUID is not aliased onto it. JobStarted of another GUID does not delete or rename an assigned waiter or copy its FIFO clock. A request-less JobAssigned yields occupancy only when a dispatchable JobAvailable would actually fit after that yield, including while that reservation is still unexpired; a quota-blocked available job does not evict a useful foreign bootstrap reservation. The original waiter and FIFO stay in the journal. Same-GUID JobAvailable keeps occupancy. An official build preserves the source tree when container stop is not proven. A replayed MESSAGE with the same session and messageID does not refresh idle-retirement freshness. A late message from a replaced session does not overwrite current demand. golang.org/x/text is v0.39.0. The .92 and .93 patches are unchanged. This is a source/artifact candidate, not a fleet rollout.

... (truncated)

• c113d4c Merge pull request #457 from NDDev-OpenNetwork/fix/reconcile-orphaned-queue-i...
• dbaa4ac fix: reconcile terminal queue orphans and preserve workers during maintenance
• 3d8b898 build: update the provider network dependency
• 22bde32 Merge pull request #456 from NDDev-OpenNetwork/fix/refresh-incomplete-incus-i...
• 966d1b4 chore: record the reproducible provider 132 release and rollout contract
• 7a82d68 fix(provider): refresh a complete inventory snapshot before retrying
• deb7eb1 fix(provider): refresh incomplete inventory after lease transitions
• 68264ad Merge pull request #455 from NDDev-OpenNetwork/chore/ignore-feedback-python-c...
• e00edfa chore(git): ignore generated feedback Python caches
• 2e07dce Merge pull request #454 from NDDev-OpenNetwork/chore/benchmark-dependency-con...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)