Skip to content

Merge upstream NVIDIA/SkillSpector v2.3.11 (up to c2d09df)#9

Merged
will-exaforce merged 20 commits into
mainfrom
sync-to-ver-2-3-11
Jul 14, 2026
Merged

Merge upstream NVIDIA/SkillSpector v2.3.11 (up to c2d09df)#9
will-exaforce merged 20 commits into
mainfrom
sync-to-ver-2-3-11

Conversation

@will-exaforce

@will-exaforce will-exaforce commented Jul 13, 2026

Copy link
Copy Markdown

Summary

  • Sync the ExaForce fork up to upstream NVIDIA/SkillSpector v2.3.11 (4cf0cb9 chore(release): bump version to 2.3.11), stopping at merge commit c2d09df as requested.
  • Brings in 19 upstream commits via a single --no-ff merge (fa7d15d), matching the prior sync pattern (d3fac00).

Details

Benchmark

Report of performance when compared to Exaforce/SkillSpector main (Represented as Prune request token bloat)
report.md

Warning

Verification gap: the ExaForce schema-pruning monkeypatch (e6ac14c, a2f6d97) targets upstream LLM/prompt code that this sync touched. The merge was textually clean but the patch's compatibility against the new upstream was not run locally. Please rely on CI + review, or run the exaforce pruning tests (cb631d8) before merging.

Hiten0305l and others added 20 commits June 29, 2026 15:03
Signed-off-by: Hiten <erhiten6@gmail.com>
Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
…tion audit

Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
…mentation

Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
batch_scan.py main(): reconfigure stdout to UTF-8 on win32 so
Rich terminal output with CJK characters renders correctly.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
…on criteria

Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
…l test files - Add SPDX license header to 8 test files - Add from __future__ import annotations to 8 test files - Fix Unicode stdout crash in test_pool_wiring.py on Windows - Add conftest.py with pytest markers registration - 120 tests passing Co-Authored-By: Claude <noreply@anthropic.com>

Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
set_api_pool previously only patched llm_utils.get_chat_model,
but llm_analyzer_base uses a module-level from-import that
created a local reference bypassing the pool. Graph analyzers
(95% of LLM calls) were not using PooledChatModel.

Now patches both llm_utils and llm_analyzer_base, plus adds
LLMAnalyzerBase._llm verification to test_pool_wiring.py.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
Documentation (12 md, zero stale refs, cross-linked footers):
- README: TOC, badges, all commands, reviewer index
- REVIEW_RESPONSE: full 3-issue response, before/after tables
- DESIGN: dual-patch mechanism, updated file layout
- New CONTRIBUTING.md at module root (GitHub standard)
- Archive 7->5: merged COMMAND_REFERENCE->README, RISK_TABLE->PITFALLS

New thematic tests (44 tests, answering review concerns):
- test_monkeypatch_invasiveness.py: 14 tests (thread isolation, import safety)
- test_monkeypatch_fragility.py: 26 tests (per-patch guard, deep deps, atomicity)

164 tests total, all passing. Production code unchanged (runner.py fix 08f624c).

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
Signed-off-by: WhereIs38 <CinderellaDoyle@icloud.com>
Refresh the public SkillSpector tree from internal OSS branch release/oss-2026-06-30-2 at 3c2309dfde0a09f2768f60ef7e93b089d42d5fcb.

Changes:
- bump the package and lockfile snapshot from 2.3.7 to 2.3.9
- publish Bedrock provider dependencies in the resolved lockfile
- carry the MCP least-privilege formatting fix
- refresh public documentation formatting and ignored review artifacts

Verification:
- create-oss-release smoke gate: 1256 passed, 12 skipped, 6 xfailed
- uv lock --check
- pytest -q tests/test_mcp_least_privilege.py (14 passed)
- Ruff lint and format checks on changed Python files
- uv run reports SkillSpector 2.3.9

Signed-off-by: Keshav Pradeep <32313895+keshprad@users.noreply.github.com>
…ch-scanner

feat: add multilingual batch scanner with parallel execution and LLM gap-fill
refactor: centralize cleanup and risk threshold
Refresh the public SkillSpector snapshot from internal branch release/oss-2026-07-06 at b86ae09dac661abef3a0c87258e7ec7f669f5f52.

The merged public feature content already matches the internal OSS tree, so this release advances only the package and lockfile versions from 2.3.9 to 2.3.11.

Verification:
- create-oss-release.sh via uv run --all-extras (1,256 passed; 12 skipped; 34 deselected; 6 xfailed)
- uv lock --check
- git diff --check origin/main

Signed-off-by: Keshav Pradeep <32313895+keshprad@users.noreply.github.com>
@will-exaforce will-exaforce requested a review from smoy July 13, 2026 11:18
@will-exaforce will-exaforce merged commit 636f3dc into main Jul 14, 2026
0 of 4 checks passed
@will-exaforce will-exaforce deleted the sync-to-ver-2-3-11 branch July 14, 2026 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants