chore(release): cut orb-v3.7.0

[github-actions]

Proposes cutting orb-v3.7.0 (a minor release) from the current
stable release orb-v3.6.0.

Merging this PR tags orb-v3.7.0 and dispatches the image build/publish --
which still requires a release environment approval before anything reaches GHCR (see
.github/workflows/release-selfhost.yml). The daily beta channel is unaffected either way.

Image-relevant commits since the last stable release

• ledger(policy): require a declared reason for any repeat verdict at one head SHA (ledger(policy): require a declared reason for any repeat verdict at one head SHA #9865) (d07813e)
• fix(visual): release the capture retry latch that froze three contributor PRs (fix(visual): release the capture retry latch that froze three contributor PRs #9879) (5e9cd8d)
• fix(selfhost): re-drive the review a restart orphaned, not just its lock (fix(selfhost): re-drive the review a restart orphaned, not just its lock #9868) (90c6148)
• fix(queue-intelligence): move bare "reward"/"rewards" to the always-forbidden tier and correct the contract doc (orb(public-safety): sanitizePublicComment's JSDoc claims "reward" is never skippable — it is #9702) (fix(queue-intelligence): move bare reward/rewards to the always-forbidden tier and correct the contract doc #9884) (7baaa29)
• fix(routing): impose a total order on the reviewer-vote read so latest-vote-wins is deterministic (fix(routing): impose a total order on the reviewer-vote read so latest-vote-wins is deterministic #9885) (e3247ed)
• gate(eligibility): hold PRs against a priority issue until its window opens (gate(eligibility): minimum open-window before PRs against priority issues are gate-eligible #9738) (gate(eligibility): hold PRs against a priority issue until its window opens (#9738) #9847) (35e574d)
• fix(content-lane): parse zero-indent YAML block sequences in frontmatter (fix(content-lane): parse zero-indent YAML block sequences in frontmatter #9891) (0bdd9db)
• fix(services): share one positive/negative/pending split across the recommendation aggregators (fix(services): share one positive/negative/pending split across the recommendation aggregators #9890) (38e37ec)
• fix(content-lane): first-hop source URL validation failure is a hard failure, not "passed" (orb(content-lane): an unfetchable source URL reports passed on the first hop #9669) (fix(content-lane): first-hop source URL validation failure is a hard failure, not passed #9892) (af98111)
• fix(orb): whitelist gate_verdict and gate_reasoncode_bucket on ingest (fix(orb): whitelist gate_verdict and gate_reasoncode_bucket on ingest #9896) (3a10493)
• fix(content-lane): split a scalar source field's multi-item block sequence per URL (fix(content-lane): split a scalar source field's multi-item block sequence per URL #9900) (b5385ca)
• fix(signals): unify the test-evidence code-path predicate as isTestableCodePath (fix(signals): unify the test-evidence code-path predicate as isTestableCodePath #9906) (cb167ba)
• fix(review): fold pause into the ai-review public gate skip reason (fix(review): fold pause into the ai-review public gate skip reason #9909) (8369904)
• fix(orb): wire the config-drift recap section into the maintainer digest (fix(orb): wire the config-drift recap section into the maintainer digest #9910) (d0e5aae)
• fix(review): split unrecognized human-override verdicts out of confirmed (fix(review): split unrecognized human-override verdicts out of confirmed #9916) (cd491d2)
• fix(review): hold standalone provider-file edits for manual review (fix(review): hold standalone provider-file edits for manual review #9917) (c230563)
• fix(orb): report null mergeRate for a zero-sample slop band (fix(orb): report null mergeRate for a zero-sample slop band #9921) (c5a6cb4)
• fix(review): gate the zero-error label floor at the Bonferroni split delta (fix(review): gate the zero-error label floor at the Bonferroni split delta #9922) (45471e7)
• fix(review): key the generated skill's linked-issue trigger off gate mode (fix(review): key the generated skill's linked-issue trigger off gate mode #9924) (f051cd2)
• feat(gate): guardrailEscalation.onCleanReview — release the guardrail hold when the escalated review is clean (feat(gate): guardrailEscalation.onCleanReview — release the guardrail hold when the escalated review is clean #9869) (efc7223)
• fix(orb): one shared token-redaction pattern across the five public surfaces (orb(redaction): one shared token-redaction pattern — three surfaces miss ghs_/gho_/ghu_/ghr_ #9697) (fix(orb): one shared token-redaction pattern across the five public surfaces (#9697) #9918) (479af01)
• metrics(ledger): re-evaluation counts and per-author-class review-parity rollups (metrics(ledger): re-evaluation counts and per-author-class review-parity rollups #9877) (2dbb800)
• fix(gate): never close a PR for visual evidence the pipeline cannot produce (The screenshot-table gate can close PRs for evidence the bot is structurally unable to produce #9881) (fix(gate): never close a PR for visual evidence the pipeline cannot produce #9934) (31b29da)
• chore(engine): one maintainer-association predicate, with a guard against the ninth copy (chore(engine): one maintainer-association predicate, with a guard against the ninth copy #9932) (b21216b)
• feat(ledger): let an operator declare historical failed appends, so /verify can go green again (feat(ledger): let an operator declare historical failed appends, so /verify can go green again #9935) (7e0897c)
• metrics(ledger): weekly automation-rate series, published on /fairness (metrics(ledger): weekly automation-rate series, published on /fairness #9938) (b5f74fa)
• feat(fairness): one-command public verifier + published methodology page (feat(fairness): one-command public verifier + published methodology page #9941) (bae7b2f)
• fix(gate): lift the bot's own manual-review hold, and stop drafts wedging the merge train (fix(gate): lift the bot's own manual-review hold, and stop drafts wedging the merge train #9942) (35fceed)
• fix(gate): do not lift the manual-review hold while another hold is live (fix(gate): do not lift the manual-review hold while another hold is live #9943) (c7eabde)
• fix(ci): unbreak main — two checkers in test:ci are failing on a clean tree (fix(ci): unbreak main — two checkers in test:ci are failing on a clean tree #9944) (2b8def6)
• feat(gate): tell a queued PR its position in the merge train, not just the PR ahead of it (feat(gate): tell a queued PR its position in the merge train, not just the PR ahead of it #9954) (afa08af)
• feat(review): regenerate a public-safe summary when the narrative is withheld (feat(review): regenerate a public-safe summary when the narrative is withheld #9956) (81f28ca)
• feat(gate): add the block tier, so an enforcing screenshot gate holds a PR instead of destroying it (feat(gate): add the block tier, so an enforcing screenshot gate holds a PR instead of destroying it #9964) (3ed97dc)
• fix(fairness): commit only to a corpus a reader can actually download (fix(fairness): commit only to a corpus a reader can actually download #9966) (40133d7)
• fix(stats): derive the published totals from the ledger instead of publishing a false zero (fix(stats): derive the published totals from the ledger instead of publishing a false zero #9967) (dcbfe2a)
• feat(status): publish per-component service status from the existing alerting stack (feat(status): publish per-component service status from the existing alerting stack #9984) (d1f7706)
• feat(status): uptime and incident history, derived from persisted samples (feat(status): uptime and incident history, derived from persisted samples #9990) (a7673e2)
• queue(locks): register the actuation and contributor-cap locks in the shutdown held-lock registry (queue(locks): register the actuation and contributor-cap locks in the shutdown held-lock registry #10067) (eca3b61)
• fix(review): keep the bounded review diff actually within its char budget (fix(review): keep the bounded review diff actually within its char budget #10071) (d301523)
• fix(github): guard the NaN expiry in mintInstallationToken (fix(github): guard the NaN expiry in mintInstallationToken #10074) (582aa25)
• intake(idea): accept the IdeaTarget object shapes validateIdeaSubmission already supports (intake(idea): accept the IdeaTarget object shapes validateIdeaSubmission already supports #10070) (55d1e4b)
• fix(ledger): record WHY a pull request was held, not the gate's conclusion (fix(ledger): record WHY a pull request was held, not the gate's conclusion #10072) (45c8723)
• fix(review): count manual work carried on non-deciding verdicts in the automation rate (fix(review): count manual work carried on non-deciding verdicts in the automation rate #10089) (0919f19)
• fix(settings): read the two remaining LOOPOVER_* flags via the codebase truthy convention (fix(settings): read the two remaining LOOPOVER_* flags via the codebase truthy convention #10097) (3b2dd1e)
• fix(review): preserve generic gate warnings on the surface-close hold path (fix(review): preserve generic gate warnings on the surface-close hold path #10100) (83d8b40)
• fix(visual): filter a vision finding's model-authored path through toPublicSafe (fix(visual): filter a vision finding's model-authored path through toPublicSafe #10101) (457a699)
• fix(review): stop dedupeConcerns silently dropping blockers/nits past 20 (fix(review): stop dedupeConcerns silently dropping blockers/nits past 20 #10102) (067b15a)
• fix(github): make githubBypassResponseCache force an own network read on both legs (fix(github): make githubBypassResponseCache force an own network read on both legs #10103) (b900ef0)
• fix(ci): unbreak main — drop the orphaned AUTOMATION_COUNTED_ACTIONS export (fix(ci): unbreak main — drop the orphaned AUTOMATION_COUNTED_ACTIONS export #10111) (a1d0f67)
• feat(chat): the maintainer grounding-tool registry, read-only by construction (feat(chat): the maintainer grounding-tool registry, read-only by construction #10099) (9f673b8)
• fix(db): bound submitter_outcome_log and alert_dedup_claims by retention policy (fix(db): bound submitter_outcome_log and alert_dedup_claims by retention policy #10106) (ec259cb)
• fix(settings): thread unstableExplainedByIgnoredChecks into isCommentMergeStateHeld (fix(settings): thread unstableExplainedByIgnoredChecks into isCommentMergeStateHeld #10110) (c877ed6)
• fix(selfhost): route the last two bare-Number() env knobs through parsePositiveIntEnv + preflight (fix(selfhost): route the last two bare-Number() env knobs through parsePositiveIntEnv + preflight #10108) (45075fd)
• fix(selfhost): mirror the engine's JSON->YAML retry in private-config parsing (fix(selfhost): mirror the engine's JSON->YAML retry in private-config parsing #10120) (1ffe1b0)
• fix(db): fold five raw-SQL repo-identity tables and widen the drift guard past Drizzle (fix(db): fold five raw-SQL repo-identity tables and widen the drift guard past Drizzle #10125) (72ec3ae)
• fix(gate): an unstable merge state must not summon a human (fix(gate): an unstable merge state must not summon a human #10123) (645b323)
• perf(webhook): give every coalesce family the quiet window its key needs (perf(webhook): give every coalesce family the quiet window its key needs #10133) (cc6db92)
• fix(visual): only mark capture structurally-unobtainable on a proven, not a failed, read (fix(visual): only mark capture structurally-unobtainable on a proven, not a failed, read #10129) (d1c105e)
• fix(queue): bound and isolate the notify-evaluate deliver fan-out (fix(queue): bound and isolate the notify-evaluate deliver fan-out #10140) (41b0d17)
• fix(selfhost): translate SQLite AUTOINCREMENT so migrations apply on Postgres (fix(selfhost): translate SQLite AUTOINCREMENT so migrations apply on Postgres #10143) (07df5ca)
• fix(upstream): treat a failed drift-issue fingerprint search as inconclusive, not absent (fix(upstream): treat a failed drift-issue fingerprint search as inconclusive, not absent #10141) (26372d8)
• fix(review): gate the tuning advisor on wouldMerge and weighted precision, matching the breaker (fix(review): gate the tuning advisor on wouldMerge and weighted precision, matching the breaker #10142) (4ce09ed)
• fix(services): bound the reviewer_vote track-record read to the newest N votes (fix(services): bound the reviewer_vote track-record read to the newest N votes #10152) (7075e97)
• fix(review): bound the render-failure capture-retry chain with a durable per-head budget (fix(review): bound the render-failure capture-retry chain with a durable per-head budget #10151) (4736302)
• fix(orb): validate the sender-supplied ingest timestamps before they reach orb_signals (fix(orb): validate the sender-supplied ingest timestamps before they reach orb_signals #10156) (1a2b41a)
• fix(orb): do not un-install repos from a page-capped installation-repositories crawl (fix(orb): do not un-install repos from a page-capped installation-repositories crawl #10159) (55cbeb9)
• feat(gate): let maintainers be exempt from the missing-linked-issue penalty (feat(gate): let maintainers be exempt from the missing-linked-issue penalty #10160) (8e4dccb)
• fix(queue): thread ignoredCheckRuns into the live CI aggregate, not just its cache key (fix(queue): thread ignoredCheckRuns into the live CI aggregate, not just its cache key #10163) (7510075)
• fix(comment): say "waiting on checks" when a hold is not asking anyone to act (fix(comment): say "waiting on checks" when a hold is not asking anyone to act #10166) (ffc4f09)
• fix(services): batch the per-repo outcome-patterns snapshot read (fix(services): batch the per-repo outcome-patterns snapshot read #10165) (0a67db2)
• fix(gate): never plan an add and a remove of the manual-review label together (fix(gate): never plan an add and a remove of the manual-review label together #10167) (456a55c)
• fix(mcp): exclude admin tools from a self-host discovery card when the admin surface is off (fix(mcp): exclude admin tools from a self-host discovery card when the admin surface is off #10172) (c1484f5)
• fix(review): derive the proof-page accuracy from real reversals and surface ledger exclusions (fix(review): derive the proof-page accuracy from real reversals and surface ledger exclusions #10178) (c378e0a)
• refactor: dedup estimateNeurons and the configured-repo-set assembly (refactor: dedup estimateNeurons and the configured-repo-set assembly #10179) (515de46)
• perf(queue): claim the actuation lock before the refresh it exists to prevent (perf(queue): claim the actuation lock before the refresh it exists to prevent #10181) (db3fe36)
• fix(services): enqueue notify-deliver for the approval-queue staged-action and reminder badges (fix(services): enqueue notify-deliver for the approval-queue staged-action and reminder badges #10182) (ffb4a0c)
• fix(observability): group AI generations by their real trace, and attribute spend per repo (fix(observability): group AI generations by their real trace, and attribute spend per repo #10187) (693aed8)
• fix(observability): report the model that actually ran on the AI failure path, and surface degraded requests (fix(observability): report the model that actually ran on the AI failure path, and surface degraded requests #10192) (96e6394)
• fix(backfill): gate the open-data crawl on its own segments, not a clock every job bumps (fix(backfill): gate the open-data crawl on its own segments, not a clock every job bumps #10203) (780fe56)
• perf(queue): back off re-evaluating a PR whose verdict never changes (perf(queue): back off re-evaluating a PR whose verdict never changes #10204) (38a09c9)
• feat(review): report a superseded pull request as superseded, not unlinked (feat(review): report a superseded pull request as superseded, not unlinked #10205) (cc886b9)
• fix(selfhost): stop the redaction scrubber nulling every AI token count (fix(selfhost): stop the redaction scrubber nulling every AI token count #10212) (f26e656)
• refactor(advisory): give addPullRequestFindings named signals instead of a 12-argument tail (refactor(advisory): give addPullRequestFindings named signals instead of a 12-argument tail #10214) (cb3f1ed)
• feat(observability): opt-in capture of AI prompts and completions (feat(observability): opt-in capture of AI prompts and completions #10220) (07a43da)
• mcp(telemetry): put the tool call's outcome on the OTel span instead of only in the log line (mcp(telemetry): put the tool call's outcome on the OTel span instead of only in the log line #10230) (188a73e)
• fix(api): validate discovery routes against the schemas their spec publishes (fix(api): validate discovery routes against the schemas their spec publishes #10225) (6946385)
• feat(observability): capture every miner AI generation, and stop fabricating zero token counts (feat(observability): capture every miner AI generation, and stop fabricating zero token counts #10233) (ba35c8b)
• feat(observability): emit review quality to PostHog as $ai_metric (feat(observability): emit review quality to PostHog as $ai_metric #10228) (ff28627)
• fix(queue): stop the verdict backoff from eating a manual retrigger or an operator force (fix(queue): stop the verdict backoff from eating a manual retrigger or an operator force #10229) (853ebe0)
• fix(mcp): attach mcp_tool/error_code to the remote sink's exception capture (fix(mcp): attach mcp_tool/error_code to the remote sink's exception capture #10236) (e664c35)
• feat(observability): name AI traces in PostHog with a $ai_trace envelope (feat(observability): name AI traces in PostHog with a $ai_trace envelope #10223) (f759c0e)
• fix(backfill): stop recording a resume cursor the sampled segment can never consume (fix(backfill): stop recording a resume cursor the sampled segment can never consume #10238) (e28d90b)
• fix(orb): gate the ai_review_inconclusive hold on aiReviewGateMode (fix(orb): gate the ai_review_inconclusive hold on aiReviewGateMode #10239) (00e3ee9)
• fix(gate): default the three bare gateMode() calls in advisory.ts to advisory (fix(gate): default the three bare gateMode() calls in advisory.ts to advisory #10245) (78891b8)
• feat(observability): give every cache surface one vocabulary for a hit (feat(observability): give every cache surface one vocabulary for a hit #10244) (d4b477f)
• fix(queue): wire lock-heartbeat onLost at both actuation and AI-review call sites (fix(queue): wire lock-heartbeat onLost at both actuation and AI-review call sites #10254) (2794910)
• fix(queue): surface a finding when capture-unobtainable degrades the screenshot-table gate (fix(queue): surface a finding when capture-unobtainable degrades the screenshot-table gate #10256) (e3f7b45)
• fix(observability): count the prompt-cache tiers as input tokens for the CLI providers (fix(observability): count the prompt-cache tiers as input tokens for the CLI providers #10251) (fed13d4)
• refactor(ai-review): give both reviewer paths one shared options type instead of a positional tail (refactor(ai-review): give both reviewer paths one shared options type instead of a positional tail #10260) (0bc00ab)
• fix(queue): time-bound queue-health history for the 30-day trend window (queue(signal-snapshot): time-bound the queue-health history read so the 30-day queue-trend window can resolve a baseline #10020) (fix(queue): time-bound queue-health history for the 30-day trend window #10262) (e5600c2)
• feat(observability): emit the routing shadow's precision margin as $ai_metric (feat(observability): emit the routing shadow's precision margin as $ai_metric #10267) (7b6e2e2)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	loopover-ui	49dcce3	Commit Preview URL Branch Preview URL	Jul 31 2026, 05:29 PM

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.