Skip to content

Release 2.1.270 (2026-10-26)

Documentation

  • document the custom validator stage running in PR CI (#3672)

Features

  • add the deferred standing queue kind (#3684) Adds DEFERRED next to INTAKE and PLANNING (label deferred, Epic (deferred): , archives, sentinel), with QUEUE_KINDS, QUEUE_KIND_BY_KEY, ensure_deferred_epic, container_kind, the deferred PR-refusal text and DEFERRED_ROUTE_ONLY. epic_audit no longer hardcodes intake/planning. vrg-epic-move and vrg-issue-create refuse moves into and out of a deferred epic, pointing at vrg-intake-route. Task 1 of epic vergil-project/.github#508.

  • add security records core library and labels (#3685) Add lib/security_records.py: the advisories REST wrapper (single-shot create via the new github.post_json_once, list reads projected with --jq to IDs, states, package and tracking lines, and gh errors re-raised without stdout), the two reference-line parsers, pair classification, and retarget with unmarking of dropped issues. Register the security and security-disclosed labels, and let read_json_paginated take a per-page jq filter. Plan Task 2 of epic vergil-project/.github#517 (issue #3677).

  • route items into and out of the deferred queue (#3686) vrg-intake-route now routes between all container epics (intake, planning, ad hoc, deferred) per a ROUTES table keyed by container_kind. defer takes --reason, --revisit-when and an optional --date, moves the item under its queue home's deferred epic, removes in-progress, and records the deferral with a Deferred from: line (a refresh on a deferred item records only). A new intake route revives a deferred item. Development-epic tasks are refused naming the parent; a planning item with an Epic: marker refuses defer and drop; an ad-hoc item with an open closing PR refuses defer. A record that fails after the move raises with the full intended comment. Drop names the source queue.

  • add the vrg-queue deferred view (#3687)

CI Evidence: All gates passed — full audit bundle available. Download →