alphagov/gds-api-adapters erreicht einen Gesundheitsindex von 93 von 100 und liegt damit im Bereich Außergewöhnlich. Am stärksten schneidet es bei Sustainability & Governance (92/100) ab, am schwächsten bei AI Readiness (44/100). Zuletzt heute aktualisiert. 13 Mitwirkende tragen den Großteil der jüngsten Arbeit.
93
gesamt / 100
Außergewöhnlich
Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
93
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 79 wird auf der veröffentlichten Indexskala auf 93 kalibriert (Register-Kalibrierung 2026-08-02).
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Liefert Releases aus — 100 Versions-Tags (keine GitHub-Releases)
36/36
Release-Aktualität — letztes Release vor 0 Tagen
27/27
Release-Rhythmus — ein Release etwa alle 24,7 Tage
0/10
OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count
100
latest_release_tag
v103.4.0
releases_from_tags
ja
days_since_latest_release
0
mean_days_between_releases
24,7
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25
Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
0
affected_packages
0
assessed_packages
1
unassessed_packages
22
affected_by_severity
none
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 1 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. 22 konnten nicht bewertet werden — keine aufgelöste Version, ein nicht unterstütztes Ökosystem oder außerhalb der ausgewiesenen Paketliste. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
Typprüfbarer Code — Ruby ohne Typprüfungs-Konfiguration
55/55
Handhabbare Dateigrößen — 0/123 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_language
Ruby
largest_source_bytes
40.393
source_files_sampled
123
oversized_source_files
0
Eckdaten
21GitHub-Sterne
99Mitwirkende
126Commits, letzte 12 Monate
0Tage seit letztem Push
100Releases
13Bus-Faktor
1offene Issues
RubyGemsPaket-Ökosysteme
Warnungen zur Datenerhebung
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 13 ⇿
0Sterne
13Forks
93Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 35Minor 44Patch 14
Jeder Punkt umfasst 12 Tage.
OpenSSF Scorecard 7.8 / 10
7.8Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-27 10:14 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 0 direkte und 23 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
RubyGems
addressable
—
indirekt
RubyGems
byebug
—
indirekt
RubyGems
climate_control
—
indirekt
RubyGems
govuk_schemas
—
indirekt
RubyGems
link_header
—
indirekt
RubyGems
minitest
—
indirekt
RubyGems
minitest-around
—
indirekt
RubyGems
mocha
—
indirekt
RubyGems
null_logger
—
indirekt
RubyGems
pact
—
indirekt
RubyGems
pact-consumer-minitest
—
indirekt
RubyGems
pact-mock_service
—
indirekt
RubyGems
pact_broker-client
—
indirekt
RubyGems
plek
—
indirekt
RubyGems
rack
—
indirekt
RubyGems
rack-test
—
indirekt
RubyGems
rake
—
indirekt
RubyGems
rdoc
—
indirekt
RubyGems
rest-client
—
indirekt
RubyGems
rubocop-govuk
5.2.1
indirekt
RubyGems
simplecov
—
indirekt
RubyGems
timecop
—
indirekt
RubyGems
webmock
—
indirekt
Abhängigkeits-Advisories 0
Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 1 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 0 tragen bekannte Advisories, davon 0 direkte. 22 konnten nicht bewertet werden – keine aufgelöste Version, ein nicht unterstütztes Ökosystem, oder außerhalb der ausgewiesenen Paketliste.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"govuk"
],
"is_fork": false,
"size_kb": 3672,
"has_wiki": false,
"homepage": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"languages": {
"Ruby": 583301
},
"pushed_at": "2026-07-27T10:08:02Z",
"created_at": "2011-12-02T14:13:57Z",
"owner_type": "Organization",
"updated_at": "2026-07-27T10:06:12Z",
"description": "A set of API adapters to work with the GOV.UK APIs",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Ruby",
"significant_languages": [
"Ruby"
]
},
"owner": {
"blog": "https://gds.blog.gov.uk/",
"name": "Government Digital Service",
"type": "Organization",
"login": "alphagov",
"company": null,
"location": "The White Chapel Building, 10 Whitechapel High Street, London E1 8QS",
"followers": 1576,
"avatar_url": "https://avatars.githubusercontent.com/u/596977?v=4",
"created_at": "2011-02-02T15:45:37Z",
"is_verified": null,
"public_repos": 1528,
"account_age_days": 5653
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v103.4.0",
"kind": "minor",
"published_at": "2026-07-27T10:04:44Z"
},
{
"tag": "v103.3.1",
"kind": "patch",
"published_at": "2026-04-20T11:37:43Z"
},
{
"tag": "v103.3.0",
"kind": "minor",
"published_at": "2026-04-09T14:01:54Z"
},
{
"tag": "v103.2.0",
"kind": "minor",
"published_at": "2026-04-01T09:05:39Z"
},
{
"tag": "v103.1.1",
"kind": "patch",
"published_at": "2026-03-30T16:03:54Z"
},
{
"tag": "v103.1.0",
"kind": "minor",
"published_at": "2026-03-10T08:39:03Z"
},
{
"tag": "v103.0.0",
"kind": "major",
"published_at": "2026-03-02T09:50:37Z"
},
{
"tag": "v102.0.0",
"kind": "major",
"published_at": "2026-01-27T11:34:22Z"
},
{
"tag": "v101.2.0",
"kind": "minor",
"published_at": "2025-12-17T16:53:45Z"
},
{
"tag": "v101.1.0",
"kind": "minor",
"published_at": "2025-12-17T10:00:27Z"
},
{
"tag": "v101.0.0",
"kind": "major",
"published_at": "2025-08-14T14:45:59Z"
},
{
"tag": "v100.0.0",
"kind": "major",
"published_at": "2025-08-13T12:13:12Z"
},
{
"tag": "v99.3.0",
"kind": "minor",
"published_at": "2025-08-08T14:53:34Z"
},
{
"tag": "v99.2.0",
"kind": "minor",
"published_at": "2025-05-09T07:09:56Z"
},
{
"tag": "v99.1.0",
"kind": "minor",
"published_at": "2025-05-08T12:38:19Z"
},
{
"tag": "v99.0.0",
"kind": "major",
"published_at": "2025-03-26T10:21:24Z"
},
{
"tag": "v98.4.0",
"kind": "minor",
"published_at": "2025-03-19T15:43:53Z"
},
{
"tag": "v98.3.0",
"kind": "minor",
"published_at": "2025-03-12T15:55:40Z"
},
{
"tag": "v98.2.0",
"kind": "minor",
"published_at": "2025-01-06T13:57:11Z"
},
{
"tag": "v98.1.0",
"kind": "minor",
"published_at": "2024-12-18T12:09:18Z"
},
{
"tag": "v98.0.0",
"kind": "major",
"published_at": "2024-12-17T14:03:13Z"
},
{
"tag": "v97.6.0",
"kind": "minor",
"published_at": "2024-12-09T16:29:31Z"
},
{
"tag": "v97.5.0",
"kind": "minor",
"published_at": "2024-12-03T08:00:42Z"
},
{
"tag": "v97.4.1",
"kind": "patch",
"published_at": "2024-11-28T14:51:15Z"
},
{
"tag": "v97.4.0",
"kind": "minor",
"published_at": "2024-11-26T14:46:54Z"
},
{
"tag": "v97.3.0",
"kind": "minor",
"published_at": "2024-11-14T12:13:19Z"
},
{
"tag": "v97.2.0",
"kind": "minor",
"published_at": "2024-11-13T15:59:08Z"
},
{
"tag": "v97.1.0",
"kind": "minor",
"published_at": "2024-10-30T14:59:43Z"
},
{
"tag": "v97.0.0",
"kind": "major",
"published_at": "2024-10-17T09:03:00Z"
},
{
"tag": "v96.0.3",
"kind": "patch",
"published_at": "2024-08-30T15:40:09Z"
},
{
"tag": "v96.0.2",
"kind": "patch",
"published_at": "2024-06-25T12:41:52Z"
},
{
"tag": "v96.0.1",
"kind": "patch",
"published_at": "2024-05-21T09:21:25Z"
},
{
"tag": "v96.0.0",
"kind": "major",
"published_at": "2024-05-09T15:48:06Z"
},
{
"tag": "v95.1.0",
"kind": "minor",
"published_at": "2024-04-29T16:23:50Z"
},
{
"tag": "v95.0.1",
"kind": "patch",
"published_at": "2024-03-27T13:37:26Z"
},
{
"tag": "v95.0.0",
"kind": "major",
"published_at": "2024-03-26T10:50:19Z"
},
{
"tag": "v94.0.0",
"kind": "major",
"published_at": "2024-02-28T11:43:10Z"
},
{
"tag": "v93.0.0",
"kind": "major",
"published_at": "2024-01-25T11:07:44Z"
},
{
"tag": "v92.1.0",
"kind": "minor",
"published_at": "2024-01-11T14:33:20Z"
},
{
"tag": "v92.0.0",
"kind": "major",
"published_at": "2023-12-15T11:11:58Z"
},
{
"tag": "v91.1.0",
"kind": "minor",
"published_at": "2023-09-14T09:53:50Z"
},
{
"tag": "v91.0.0",
"kind": "major",
"published_at": "2023-09-11T13:43:34Z"
},
{
"tag": "v90.0.0",
"kind": "major",
"published_at": "2023-07-31T14:19:17Z"
},
{
"tag": "v89.0.0",
"kind": "major",
"published_at": "2023-07-19T15:11:42Z"
},
{
"tag": "v88.2.0",
"kind": "minor",
"published_at": "2023-06-06T11:26:47Z"
},
{
"tag": "v88.1.0",
"kind": "minor",
"published_at": "2023-05-30T10:07:21Z"
},
{
"tag": "v88.0.0",
"kind": "major",
"published_at": "2023-05-23T14:05:13Z"
},
{
"tag": "v87.1.0",
"kind": "minor",
"published_at": "2023-05-10T08:48:22Z"
},
{
"tag": "v87.0.0",
"kind": "major",
"published_at": "2023-03-29T13:25:14Z"
},
{
"tag": "v86.0.0",
"kind": "major",
"published_at": "2023-02-20T15:31:01Z"
},
{
"tag": "v85.0.1",
"kind": "patch",
"published_at": "2023-01-30T12:33:41Z"
},
{
"tag": "v85.0.0",
"kind": "major",
"published_at": "2022-12-05T10:29:58Z"
},
{
"tag": "v84.0.0",
"kind": "major",
"published_at": "2022-10-21T13:33:17Z"
},
{
"tag": "v83.0.0",
"kind": "major",
"published_at": "2022-10-03T16:00:34Z"
},
{
"tag": "v82.0.0",
"kind": "major",
"published_at": "2022-09-12T15:10:22Z"
},
{
"tag": "v81.0.4",
"kind": "patch",
"published_at": "2022-08-03T13:10:27Z"
},
{
"tag": "v81.0.3",
"kind": "patch",
"published_at": "2022-08-01T14:05:47Z"
},
{
"tag": "v81.0.2",
"kind": "patch",
"published_at": "2022-07-26T14:37:57Z"
},
{
"tag": "v81.0.1",
"kind": "patch",
"published_at": "2022-07-25T12:11:44Z"
},
{
"tag": "v81.0.0",
"kind": "major",
"published_at": "2022-07-12T13:44:12Z"
},
{
"tag": "v80.0.1",
"kind": "patch",
"published_at": "2022-06-29T12:05:49Z"
},
{
"tag": "v80.0.0",
"kind": "major",
"published_at": "2022-06-21T12:17:12Z"
},
{
"tag": "v79.2.0",
"kind": "minor",
"published_at": "2022-05-24T08:55:46Z"
},
{
"tag": "v79.1.2",
"kind": "patch",
"published_at": "2022-04-06T16:20:02Z"
},
{
"tag": "v79.1.1",
"kind": "patch",
"published_at": "2022-03-29T09:04:08Z"
},
{
"tag": "v79.1.0",
"kind": "minor",
"published_at": "2022-03-08T16:29:55Z"
},
{
"tag": "v79.0.0",
"kind": "major",
"published_at": "2022-01-25T15:39:29Z"
},
{
"tag": "v78.1.0",
"kind": "minor",
"published_at": "2022-01-19T16:29:21Z"
},
{
"tag": "v78.0.0",
"kind": "major",
"published_at": "2022-01-18T17:29:40Z"
},
{
"tag": "v77.1.0",
"kind": "minor",
"published_at": "2022-01-18T14:40:19Z"
},
{
"tag": "v77.0.0",
"kind": "major",
"published_at": "2021-12-10T10:53:32Z"
},
{
"tag": "v76.0.0",
"kind": "major",
"published_at": "2021-12-07T16:30:37Z"
},
{
"tag": "v75.3.0",
"kind": "minor",
"published_at": "2021-11-03T13:09:31Z"
},
{
"tag": "v75.2.0",
"kind": "minor",
"published_at": "2021-10-15T08:29:27Z"
},
{
"tag": "v75.1.0",
"kind": "minor",
"published_at": "2021-10-14T13:56:53Z"
},
{
"tag": "v75.0.0",
"kind": "major",
"published_at": "2021-09-28T16:20:58Z"
},
{
"tag": "v74.0.0",
"kind": "major",
"published_at": "2021-09-22T16:15:47Z"
},
{
"tag": "v73.1.0",
"kind": "minor",
"published_at": "2021-09-08T10:08:45Z"
},
{
"tag": "v73.0.0",
"kind": "major",
"published_at": "2021-08-26T10:27:03Z"
},
{
"tag": "v72.1.0",
"kind": "minor",
"published_at": "2021-07-27T14:06:16Z"
},
{
"tag": "v72.0.0",
"kind": "major",
"published_at": "2021-07-13T15:18:17Z"
},
{
"tag": "v71.9.0",
"kind": "minor",
"published_at": "2021-07-06T12:09:05Z"
},
{
"tag": "v71.8.0",
"kind": "minor",
"published_at": "2021-07-02T11:11:36Z"
},
{
"tag": "v71.7.0",
"kind": "minor",
"published_at": "2021-06-29T14:42:20Z"
},
{
"tag": "v71.6.0",
"kind": "minor",
"published_at": "2021-06-23T14:27:48Z"
},
{
"tag": "v71.5.0",
"kind": "minor",
"published_at": "2021-06-18T09:21:03Z"
},
{
"tag": "v71.4.0",
"kind": "minor",
"published_at": "2021-06-10T13:28:58Z"
},
{
"tag": "v71.3.0",
"kind": "minor",
"published_at": "2021-06-07T15:17:23Z"
},
{
"tag": "v71.2.0",
"kind": "minor",
"published_at": "2021-05-25T10:23:19Z"
},
{
"tag": "v71.1.0",
"kind": "minor",
"published_at": "2021-05-06T13:50:04Z"
},
{
"tag": "v71.0.0",
"kind": "major",
"published_at": "2021-03-22T13:50:28Z"
},
{
"tag": "v70.0.0",
"kind": "major",
"published_at": "2021-03-15T10:15:50Z"
},
{
"tag": "v69.3.0",
"kind": "minor",
"published_at": "2021-01-25T13:26:11Z"
},
{
"tag": "v69.2.0",
"kind": "minor",
"published_at": "2021-01-20T13:57:59Z"
},
{
"tag": "v69.1.0",
"kind": "minor",
"published_at": "2021-01-19T14:20:06Z"
},
{
"tag": "v69.0.0",
"kind": "major",
"published_at": "2021-01-18T13:42:42Z"
},
{
"tag": "v68.2.0",
"kind": "minor",
"published_at": "2021-01-06T12:59:15Z"
},
{
"tag": "v68.1.0",
"kind": "minor",
"published_at": "2021-01-05T15:33:41Z"
},
{
"tag": "v68.0.0",
"kind": "major",
"published_at": "2020-12-18T09:18:33Z"
},
{
"tag": "v67.2.1",
"kind": "patch",
"published_at": "2020-12-10T09:19:11Z"
}
],
"recent_commits": [
{
"oid": "d9d389c7ea5eebdb5c6c722245da7749a75de375",
"body": "Release 103.4.0",
"is_bot": false,
"headline": "Merge pull request #1412 from alphagov/release-104.4.0",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T10:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8de05691efede1b40ca7d07beebde7285ac78efc",
"body": null,
"is_bot": false,
"headline": "Release 103.4.0",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T09:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62394c927f371eb15e157e8df6441902681ad412",
"body": "Improve RFC-192 validator method",
"is_bot": false,
"headline": "Merge pull request #1411 from alphagov/rfc-192-adjust-validator",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T09:47:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e8ebb927c4e75253a08ccb23655553e65373114",
"body": "Co-authored-by: Bruce Bolt <6329861+brucebolt@users.noreply.github.com>",
"is_bot": false,
"headline": "Update test/validators/base_path_validator_test.rb",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T08:25:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "133988b48b976d36f96951db4f525cbe1ffa2a71",
"body": "- Remove \"Path\" from the front of all error messages - unnecessary because context\n is provided by the error key\n- We're using a mixture of must/cannot/contains, adjust that all to must/must not\n- Although it probably isn't important, 512 bytes and 512 characters might not\n be the same, so at least keep the language correct.",
"is_bot": false,
"headline": "Standardise language in error messages",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T18:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7cb74321c59e27bb16d7f68df52c80e68f08a4b",
"body": "- The primary user of errors is going to be publishing-api, secondary users the\n publishing apps. So update the errors to return codes similar to the ones that\n publishing-api returns at the moment (base_path_invalid and path_too_long).\n- At some future time we might make these more varied, but these two are\n being returned by publishing-api now, so returning them will help keep\n it compatible.",
"is_bot": false,
"headline": "Return hash of errors with codes",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7371e7e18f76cae38718534a8891d631aa05a67a",
"body": "- We weren't covering the nil path, and adding the test showed up that some\n of the error tests rely on the base_path not being nil (okay in the valid? method\n where the ||'s shortcut returning false, but we need to manually shortcut\n in the errors method.",
"is_bot": false,
"headline": "Improve nil handling",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "139c80e28a0921b87f74ae55a53d489f011d2846",
"body": "- This regex was actually testing the structure more thoroughly than it needs\n to to detect invalid_chars? Now that we're explicitly testing if the path is\n a single / (and we're testing that there are no runs of // .. and the path doesn't\n end in a .) we can simplify this down to just testing that the path is entirely\n made of allowed characters (in any order, because other tests are checking\n that).",
"is_bot": false,
"headline": "Simplify invalid_chars? regex",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddb4785c5b72681e1e05f0a3fcff719438e264c6",
"body": "- We're implicitly testing this in the invalid_chars? method, but that's actually\n not doing what it says (it's actually testing both chars _and_ structure of the\n path), so break out an explicit test here so we can simplify invalid_chars? in\n the next commit.",
"is_bot": false,
"headline": "Explicitly test for no leading slash.",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:27:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e3f06e5a98c4c68fcf4a0427137f8300ff29912",
"body": "- The 511 figure came from a misreading of the existing publishing-api regex,\n which is 511 chars _plus_ the leading slash. The RFC has now been updated,\n we adjust here to 512 because it's more recognisable.",
"is_bot": false,
"headline": "Update max base_path size from 511 chars to 512",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:22:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad33e42872399ac229e2b1d34e20bea53bafcd06",
"body": "- It's important we don't miss any branches in these tests, and this will help.",
"is_bot": false,
"headline": "Turn on branch coverage report",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:16:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "689b03726ad877b907b8e30bb146b124e9ed543c",
"body": "…2ca4\n\nUpdate simplecov requirement from ~> 0.21 to ~> 1.0 in the test group",
"is_bot": false,
"headline": "Merge pull request #1410 from alphagov/dependabot/bundler/test-eb6996…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T12:08:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcda533bbd0e7b9818d3836aed891c86218f1fd5",
"body": "…ons/checkout-7.0.1\n\nBump actions/checkout from 7.0.0 to 7.0.1",
"is_bot": false,
"headline": "Merge pull request #1408 from alphagov/dependabot/github_actions/acti…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T11:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82c7b08f0c0de35bf9686bf40db1ddbd3213acb6",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 7.0.0 to 7.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T11:18:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da43243d6b8725edf72fa8ed019e857726fd1208",
"body": "…/setup-ruby-1.319.0\n\nBump ruby/setup-ruby from 1.316.0 to 1.319.0",
"is_bot": false,
"headline": "Merge pull request #1409 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T11:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ab824157ecfb78b9a935bf13e9ec1a4c1672526",
"body": "Add RFC-192 compliant base path validator",
"is_bot": false,
"headline": "Merge pull request #1406 from alphagov/rfc-192-simplify-base-paths",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T08:09:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d29bcf9da4d3736050dba64f32aa31425dbe941a",
"body": "Updates the requirements on [simplecov](https://github.com/simplecov-ruby/simplecov) to permit the latest version.\n\nUpdates `simplecov` to 1.0.1\n- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)\n- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)\n-\n[…]\n-\nupdated-dependencies:\n- dependency-name: simplecov\n dependency-version: 1.0.1\n dependency-type: direct:development\n dependency-group: test\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update simplecov requirement from ~> 0.21 to ~> 1.0 in the test group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T07:03:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "242b3bc4855181940edcc0668bd57d7021f25adc",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.316.0 to 1.319.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/d45b1a4e94b71acab930e56e\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.319.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.316.0 to 1.319.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T07:03:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "776ccfdca12cd0c6ed22c613203594d14d7ebcbc",
"body": "- Implements validation based of the suggestions in RFC-192\n (https://github.com/alphagov/govuk-rfcs/pull/192)\n- allowed paths are 511 chars or shorter\n- they contain only lowercase letters and numbers, periods, forward slashes and dashes (minus signs)\n- they do not contain runs of forward slashes or periods\n- they do not end in a period",
"is_bot": false,
"headline": "Add base_path validator",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-20T15:15:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89dfee963bc1f77f18c55b26fcfc1413cee297be",
"body": "…/setup-ruby-1.316.0\n\nBump ruby/setup-ruby from 1.314.0 to 1.316.0",
"is_bot": false,
"headline": "Merge pull request #1407 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-07-07T12:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "236a458e54c626a469b4d04af7c5d3a4f6d48ce7",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.314.0 to 1.316.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/9eb537ca036ebaed86729dcb\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.316.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.314.0 to 1.316.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-07T07:02:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0f81676baa63fd548a16707d8e6a1eed00d4b1e",
"body": "…ons/checkout-7.0.0\n\nBump actions/checkout from 6.0.3 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #1405 from alphagov/dependabot/github_actions/acti…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-06-23T11:29:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9413940685ce5122167b34f82877bdd2e1ca7fc2",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.3 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T11:24:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55f020532524c61b3179a46044f61ebb710df7ba",
"body": "…/setup-ruby-1.314.0\n\nBump ruby/setup-ruby from 1.313.0 to 1.314.0",
"is_bot": false,
"headline": "Merge pull request #1404 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-06-23T11:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da9115f588c0b92d6eb7780cd2c23f9a0f50416f",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.313.0 to 1.314.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/89f90524b88a01fe6e0b7322\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.314.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.313.0 to 1.314.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T07:02:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "342ce60fc37d5de76367136213d0f65455a3670c",
"body": "…rs-test\n\nUpdate search autocomplete tests",
"is_bot": false,
"headline": "Merge pull request #1402 from alphagov/SCH-2146-Update-GDS-API-adapte…",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-06-19T12:49:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "524d54f277ceba9fcefb82eda0ab126cafadf97a",
"body": "…/setup-ruby-1.313.0\n\nBump ruby/setup-ruby from 1.310.0 to 1.313.0",
"is_bot": false,
"headline": "Merge pull request #1403 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-06-16T15:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c131eee2ec0c3e806d8ef3712ad7034ba17e722e",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.310.0 to 1.313.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/afeafc3d1ab54a631816aba4\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.313.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.310.0 to 1.313.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-16T07:03:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "791312fca5800c1c661250270d25250f7011009f",
"body": "We no longer raise internal errors in search-api-v2 if GCP times out or\nitself raises an internal error:\nhttps://github.com/alphagov/search-api-v2/pull/677",
"is_bot": false,
"headline": "Update search autocomplete tests",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-06-12T16:15:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "017768c7a4637334321855a51c47b8a36385ae42",
"body": "…ons/checkout-6.0.3\n\nBump actions/checkout from 6.0.2 to 6.0.3",
"is_bot": false,
"headline": "Merge pull request #1400 from alphagov/dependabot/github_actions/acti…",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-06-09T10:41:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c2df6f015ee404866592bdcb9f12dd1c3ce1eaf",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.2 to 6.0.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T07:03:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd97e2d345aa130cfeabaed1712bfedfc00a77dd",
"body": "…/setup-ruby-1.310.0\n\nBump ruby/setup-ruby from 1.308.0 to 1.310.0",
"is_bot": false,
"headline": "Merge pull request #1399 from alphagov/dependabot/github_actions/ruby…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-06-03T11:25:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b44e4a4e0f53d21eef8a90778091b09f5a6c7b55",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.308.0 to 1.310.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/97ecb7b512899eb71ab1bf23\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.310.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.308.0 to 1.310.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-03T07:06:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "38a70d117651633e875a3172c0d7ef7db93c1fa5",
"body": "[PP-7718] Pin SHAs for third-party actions",
"is_bot": false,
"headline": "Merge pull request #1398 from alphagov/pin_gha_actions_to_hashes",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-20T16:34:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5af2373416153757241409beaf8a27a15598db1f",
"body": "As per policy: https://docs.publishing.service.gov.uk/manual/test-and-build-a-project-with-github-actions.html#pin-untrusted-github-actions-to-a-commit-sha",
"is_bot": false,
"headline": "Pins non-alphagov actions to a commit SHA",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-20T16:21:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6464203ff965c399c998affec606731144a3b2fc",
"body": "…/setup-ruby-1.308.0\n\nBump ruby/setup-ruby from 1.306.0 to 1.308.0",
"is_bot": false,
"headline": "Merge pull request #1397 from alphagov/dependabot/github_actions/ruby…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-05-20T15:28:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d152089ac60975a8e7bf1b54c4e7dc8f634df852",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.306.0 to 1.308.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/v1.306.0...v1.308.0)\n\n--\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.308.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.306.0 to 1.308.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-19T19:29:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "97dba5f9e1c8017542f6fd0a08641755216dff4e",
"body": "[PP-7606] Update pact tests for Publishing API error responses",
"is_bot": false,
"headline": "Merge pull request #1395 from alphagov/publishing-api-error-codes",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-19T14:20:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ecca98e2e56963d468a1eb81bdc5319294e3bf2",
"body": "Update team name in PR template",
"is_bot": false,
"headline": "Merge pull request #1396 from alphagov/update-team-name-pr-template",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-19T09:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d270f4750b7d8337be04f11c4ad92d3c90ffcc8",
"body": "The team name has changed, so updating the PR template to reflect this.",
"is_bot": false,
"headline": "Update team name in PR template",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-19T07:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18f661b8429a05ec7f847783a6af774566fcbabf",
"body": "Publishing API will includes error_code in its error responses. It is possible\nthat multiple validation fail simultaneously. In such cases, the top-level\nerror_code would be multiple_validation_errors so the `fields` property is\nexpanded to provide detailed information about each individual failure,\n[…]\n field represented as a hash containing both a human-readable error and a\nmachine-readable code.\n\nThe test is updated to expect this new structure, ensuring it accurately\nreflects the API’s behaviour.",
"is_bot": false,
"headline": "Update pact tests for Publishing API error responses",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-15T15:47:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "066477582a9b5c8081c9b1deb552ebda18d6c9e5",
"body": "…/setup-ruby-1.306.0\n\nBump ruby/setup-ruby from 1 to 1.306.0",
"is_bot": false,
"headline": "Merge pull request #1394 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-13T10:31:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e89bc7bbd6b849096197ef2f4150ef9c46e5579",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1 to 1.306.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/v1...v1.306.0)\n\n---\nupdated-de\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.306.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1 to 1.306.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T11:53:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f108be76dcdee4629c30b691c9c2bbdfb2a353c",
"body": "…-6.0\n\nUpdate minitest requirement from ~> 5.19 to ~> 6.0",
"is_bot": false,
"headline": "Merge pull request #1374 from alphagov/dependabot/bundler/minitest-tw…",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-04-28T10:24:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ac4682f53e9ebd354cdb8126a7df5c6a65f5367",
"body": "[PP-7588] Update Pact to reflect new base path schema definition",
"is_bot": false,
"headline": "Merge pull request #1392 from alphagov/update-base-path-pact",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:37:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c91c639fb73e1437904498c002edb5e7de518030",
"body": null,
"is_bot": false,
"headline": "Add missing PR links",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "768b0eca7a1879468386c75579668f2c9013633e",
"body": null,
"is_bot": false,
"headline": "Release 103.3.1",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:24:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f250317b242b0fb6668a218a27f7717aa216851b",
"body": "The absolute path definition used by base paths is being updated to have\nmultiple requirements via allOf. This test needs updating to reflect\nthat change",
"is_bot": false,
"headline": "Update Pact test for new path schema definition",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T10:24:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4396b7e68abc3a295c4f5cbe73e1c772b29b6e20",
"body": "…uk-eq-5.2.1\n\nUpdate rubocop-govuk requirement from = 5.2.0 to = 5.2.1",
"is_bot": false,
"headline": "Merge pull request #1391 from alphagov/dependabot/bundler/rubocop-gov…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-17T12:29:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "201b958ba26a309bfab7271563b978ab7494826e",
"body": null,
"is_bot": false,
"headline": "Autocorrect rubocop offences",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-17T11:40:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb2b28bbe6ff33a61e555fbec65bad36cd8ff92e",
"body": "…o-use-govuk_test-index\n\nUpdate search index",
"is_bot": false,
"headline": "Merge pull request #1389 from alphagov/SCH-1987-Refactor-pact-tests-t…",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-04-17T10:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "650b9eb72bde5e7863ea62ad815296b5b22dbd8c",
"body": "[PP-7685] Update Dependabot configuration",
"is_bot": false,
"headline": "Merge pull request #1390 from alphagov/configure-dependabot",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T17:36:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e39feefa1ae51ca73c5eec7658da989364e13c7",
"body": "Updates the requirements on [rubocop-govuk](https://github.com/alphagov/rubocop-govuk) to permit the latest version.\n- [Changelog](https://github.com/alphagov/rubocop-govuk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/alphagov/rubocop-govuk/compare/v5.2.0...v5.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: rubocop-govuk\n dependency-version: 5.2.1\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update rubocop-govuk requirement from = 5.2.0 to = 5.2.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-16T17:23:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f29f2aef4737cf87057433eae83298e2838270a8",
"body": "Configure Dependabot to only open pull requests for direct dependencies,\nreducing noise from transitive updates and keeping changes more relevant and\neasier to review.\n\nApproach recommended in GOV.UK Developer Docs.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#dependency-type-allow",
"is_bot": false,
"headline": "Restrict Dependabot updates to direct dependencies",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b16fe511365f5693c20f057027af1a4e80ed76c6",
"body": "We increase the Dependabot open PR limit to 25 to accommodate our weekly\nschedule and grouped updates, ensuring multiple batches can be raised and\nreviewed without being artificially capped. This helps avoid delays while still\nkeeping changes manageable alongside the cooldown and grouping strategy.\n\n[…]\narate internal limit of ten open pull requests which cannot be changed.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#open-pull-requests-limit-",
"is_bot": false,
"headline": "Increase Dependabot Open PR limit to 25",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c55d3f2f2f8b873323b2bdf04c521792c4f3165c",
"body": "We schedule updates weekly on Tuesdays at 7:00am UTC to balance staying current\nwith a manageable review workload. A monthly cadence would be too infrequent\nfor a single person on the daily rota, and Tuesdays avoid common non-working\ndays in our team (Mondays and Fridays at the time).\n\nThe `timezone\n[…]\nlphagov/govuk-dependabot-merger/blob/main/.github/workflows/merge-dependabot-prs.yml#L5\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#schedule-",
"is_bot": false,
"headline": "Change Dependabot schedule to weekly",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2a1dd83998acd9e828195ad72c8d2aec8461d79",
"body": "Groups Bundler updates to reduce noise and make reviews more focused by\nbatching related dependencies together. Test libraries (e.g. RSpec, SimpleCov)\nare grouped so they can be reviewed and updated in context. This approach helps\nstreamline pull requests, making them less disruptive to the team’s d\n[…]\nork. We’re only using one linter for ruby so there’s no point in grouping at\nthe moment.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--",
"is_bot": false,
"headline": "Group Dependabot PRs",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e858a41b7f2504632c6654b2f249e5783bfa48c",
"body": "This gives the community time to flag compromised or broken releases before\nupdates are applied, helping us avoid pulling in unstable or unsafe\ndependencies. Sets the values according to GOV.UK Developer docs\nrecommendations: \n- 3 days for code dependencies\n- 7 days for infrastructure tooling (Terraform, Docker), as these changes tend\n to carry more risk.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-",
"is_bot": false,
"headline": "Introduce Dependabot cooldown period",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7631d498b3bb9ccb186fd3fb204083a943675ca8",
"body": "For consistency with other repos. The quotes are not needed.",
"is_bot": false,
"headline": "Update Dependabot values format",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2ab503a89a6257a861f8eac41a2c92f386e62a0",
"body": "The government index is being retired.\nThis change isn't strictly necessary for the tests\nto pass, but might make them easier to understand\ngoing forward.",
"is_bot": false,
"headline": "Update search index",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-04-16T09:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "842d89f8071c6177891219f0ab58d4d546c1b967",
"body": "[PP-7664] Test against Ruby 4.0",
"is_bot": false,
"headline": "Merge pull request #1388 from alphagov/support-ruby-4",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T14:01:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e58ede88475cea6dcc5a7041344fce43f95c0b27",
"body": null,
"is_bot": false,
"headline": "Release 103.3.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T13:57:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f04192efa4af369a56427ca9ce01febb9c28d40",
"body": "rdoc is no longer a default gem in 4.0 so we need to include it in the\ngemspec. I believe rdoc supports the documentation at\nhttps://www.rubydoc.info/gems/gds-api-adapters/52.3.0. This is only\nexplicitly used via the Rakefile, so since Rake is a development\ndependency, I've made this the same\n\nOutpu\n[…]\nrdoc, which is not part of the default gems since Ruby 4.0.0.\nYou can add rdoc to your Gemfile or gemspec to fix this error.\nrake aborted!\nLoadError: cannot load such file -- rdoc/task (LoadError)\n```",
"is_bot": false,
"headline": "Test against Ruby 4.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T13:56:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "868114328195c51bac93a059d1421cb765fa6297",
"body": "[PP-7274] Drop support for Ruby 3.2",
"is_bot": false,
"headline": "Merge pull request #1387 from alphagov/drop-ruby-3-2",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-01T09:05:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcfbf54412fd6e9cf4fc43317dc024fee3dda671",
"body": null,
"is_bot": false,
"headline": "Release 103.2.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-03-31T11:49:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6c130b6c4e717ab5bbfb1a24404eafe85877e96",
"body": "This will be end of life from 1 April 2026",
"is_bot": false,
"headline": "Drop support for Ruby 3.2",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-03-31T11:14:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c31e026aeaf3adab1ee17892fa5ea299c04a70b5",
"body": "[PP-7566] Require `plek` in Publishing API test helpers",
"is_bot": false,
"headline": "Merge pull request #1386 from alphagov/require-plek-publishing-api",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T16:03:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d3b12ba775ba5e5ce39955f27bd96730f04c73b",
"body": null,
"is_bot": false,
"headline": "Release version 130.1.1",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T15:58:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ec65d640df9678f4d66f2868dd2ff94fab32bd5",
"body": "`Plek` is used in the Publishing API test helpers to define some\nconstants, but has not been required.\n\nThis has never been an issue before, as all consumers of this helper\nalready required `plek` in their tests. However the pact tests in the\n`frontend` app do not.\n\nTherefore requiring `plek` to ensure it is always available.",
"is_bot": false,
"headline": "Require `plek` in Publishing API test helpers",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T15:54:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "706692b4a11b48ee8db37308e38e1bee6c5bdb60",
"body": "[PNP-9879] Update example to use Frontend",
"is_bot": false,
"headline": "Merge pull request #1385 from alphagov/update-government-frontend",
"author_name": "deborahchua",
"author_login": "deborahchua",
"committed_at": "2026-03-24T17:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a179287f3c96d2365647afd84f8babc65c3324e",
"body": "We have retired government-frontend.",
"is_bot": false,
"headline": "Update example to use Frontend",
"author_name": "deborahchua",
"author_login": "deborahchua",
"committed_at": "2026-03-24T14:59:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d4b2ab6969f333eb1cab94ff8e93d7ff8aeebf1",
"body": "Add timeout helper",
"is_bot": false,
"headline": "Merge pull request #1384 from alphagov/add-timeout-helper",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-03-10T08:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "072714da862ca06d7ecdd5de8c2e03feb7ac7231",
"body": null,
"is_bot": false,
"headline": "Release version 103.1.0",
"author_name": "Callum Knights",
"author_login": "callumknights",
"committed_at": "2026-03-09T18:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26d6205f0bba44813a825366e76c948a9e141d0e",
"body": "Useful for testing graphql work",
"is_bot": false,
"headline": "Add timeout publishing API test helper",
"author_name": "Callum Knights",
"author_login": "callumknights",
"committed_at": "2026-03-09T18:05:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47b605ed0db91faa3e2fd1a2f1d1ffc21ee31f28",
"body": "…ons/upload-artifact-7\n\nBump actions/upload-artifact from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #1383 from alphagov/dependabot/github_actions/acti…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-03-02T11:25:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "750f8b4c5ed17e928301b3f41688ed9ca8e48bb8",
"body": "[SCH-1750] Remove unused #batch_search endpoint",
"is_bot": false,
"headline": "Merge pull request #1381 from alphagov/remove-batch-search-adapter",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-03-02T09:50:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f98203141d6583fb238caee67e61f268b5f24f2",
"body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/upload-artifact from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-27T17:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a5e2d988692b688e2e5546af7401eb404f297d9",
"body": "Removal of #batch_search adapter is a breaking change.",
"is_bot": false,
"headline": "Bump version to 103.0.0",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:20:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c32caf5bf58261e8e604c1e423ae98d753de15a4",
"body": "Removing unused method as part of tidying up unused Search API code.",
"is_bot": false,
"headline": "Remove unused #batch_search endpoint",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:20:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9542c80c4a004db1ab37274f8f6f4a4bf90a6e86",
"body": "[SCH-1679] Add search-api pacts to ci",
"is_bot": false,
"headline": "Merge pull request #1382 from alphagov/add-search-api-pacts-to-ci",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:05:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea3ace6a3f34792974d7a1ab10bdd8457e5220a1",
"body": "…-enum\n\n[SCH-1679] Add pact tests for Search API #search_enum",
"is_bot": false,
"headline": "Merge pull request #1380 from alphagov/search-api-pact-testing-search…",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-17T14:02:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77feffa65c15aae46aa0290c995dcf45fd2f4b9a",
"body": "#search_enum allows for the /search endpoint to be called page by page. It uses the /search endpoint, and needs params `start` and `count` to be allowed.",
"is_bot": false,
"headline": "Add pact tests for #search_enum",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-16T13:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8ff5b5bb1d2d849fcafe125cc1ae6c8922d684c",
"body": "Now that we've added the necessary pact tests for search-api and tested them locally against the published pacts we can add the pact tests to the CI pipeline.\nThere is a companion PR to add the pact-verify workflow to the search-api ci workflow, which should be merged before this PR.",
"is_bot": false,
"headline": "Add search-api pacts to ci",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-12T12:20:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4de251f39cca49a06bbd039c847856b1763e2c65",
"body": "Currently these tests aren't run as part of `bundle exec rake`, as the filename does not have the format `\"test/**/*_test.rb\"`. Changing the filename will mean that the tests are run as part of ci",
"is_bot": false,
"headline": "Rename from search.rb to search_test.rb",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-09T11:44:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bfa5aaa0722ba209897b4ac78af2235fa0ea74d",
"body": "…-endpoint-2\n\n[SCH-1679] Add pact tests for #search",
"is_bot": false,
"headline": "Merge pull request #1379 from alphagov/search-api-pact-testing-search…",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-09T09:13:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad6ce1e1f9b568f84fad78de2152112eb86b73ef",
"body": null,
"is_bot": false,
"headline": "Add pact test for search with no keyword included",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-06T16:35:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b7390da6d658490319d1fe04b640c84c4caa81b",
"body": "This is a representative test of one of the types of user input that would raise a 422 error.",
"is_bot": false,
"headline": "Add pact tests for search with invalid ordering field.",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-06T16:35:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ddefc2f7d00b93c204076f11672b934cb42219c",
"body": "[SCH-1679] Contract tests with Search API",
"is_bot": false,
"headline": "Merge pull request #1375 from alphagov/search-api-pact-testing",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-01-30T10:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a869d3e8e3ead8b245f7b8aa77a72ca2525ce0a9",
"body": "We will need multiple pact tests for search, but this PR only adds the most straightforward one so that we can get the pact tests configured correctly.",
"is_bot": false,
"headline": "Add initial pact test",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-29T17:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c215571238e349c90517a61a8f41bed06a02e9",
"body": "…uk-eq-5.2.0",
"is_bot": false,
"headline": "Merge pull request #1378 from alphagov/dependabot/bundler/rubocop-gov…",
"author_name": "GOV.UK Continuous Integration User",
"author_login": "govuk-ci",
"committed_at": "2026-01-28T08:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e45d4150fe21a1a5c1574dba4278db9c689ea84",
"body": "Updates the requirements on [rubocop-govuk](https://github.com/alphagov/rubocop-govuk) to permit the latest version.\n- [Changelog](https://github.com/alphagov/rubocop-govuk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/alphagov/rubocop-govuk/compare/v5.1.20...v5.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: rubocop-govuk\n dependency-version: 5.2.0\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update rubocop-govuk requirement from = 5.1.20 to = 5.2.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-27T17:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b6d37112a594094501f32e5287da771168e3823",
"body": "[SCH-1704] Removed unused search-api adapters",
"is_bot": false,
"headline": "Merge pull request #1376 from alphagov/remove-unused-search-endpoints",
"author_name": "Jess Jones",
"author_login": "hannako",
"committed_at": "2026-01-27T11:34:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d15040f90077d5a912d045eb7287404ffdb519e",
"body": "Co-authored-by: Jos Koetsier <jos.koetsier@digital.cabinet-office.gov.uk>",
"is_bot": false,
"headline": "Bump version to 102.0.0",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-15T14:45:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca7e960c791ad3ba8fe125d0f056339c133cf821",
"body": "Deleting add_document, delete_document, get_content & delete_content and associated test helpers as they're no longer used.\n\nCo-authored-by: Jos Koetsier <jos.koetsier@digital.cabinet-office.gov.uk>",
"is_bot": false,
"headline": "Removed unused search-api adapters",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-15T14:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aacab914ea582cd37e8248cd1d89f479193958d",
"body": null,
"is_bot": false,
"headline": "Declare new pact with Search API",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-07T09:42:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9faabb2c29c95f5c7243267bf6ded3bb5777765",
"body": "Updates the requirements on [minitest](https://github.com/minitest/minitest) to permit the latest version.\n- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)\n- [Commits](https://github.com/minitest/minitest/compare/v5.19.0...v6.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: minitest\n dependency-version: 6.0.1\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update minitest requirement from ~> 5.19 to ~> 6.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-29T17:04:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9e44f94cbb5dea44a92b453d9b2156ce8119a79",
"body": "…emoved-version\n\nPact updates for removal of ?version= in GET content",
"is_bot": false,
"headline": "Merge pull request #1373 from alphagov/update-pacts-for-get-content-r…",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T16:53:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "644126c16e12f66a67f03ffbf74fd6ee70ac558b",
"body": "Not sure if this is strictly needed to get the Pact tests updated, but\nseems like a new gem version is sensible in any case.",
"is_bot": false,
"headline": "Bump the version to 101.2.0",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T16:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36d3be4efecf79868176aa4328ec87fac1432300",
"body": "We've replaced the version param with a content_store param.\n\nThis means it's no longer possible to request a superseded edition (so\nthat pact is removed).\n\nIt's still possible to request published content instead of draft (by\nquerying with content_store=live), or to request draft content\nspecifically (with content_store=draft).",
"is_bot": false,
"headline": "Pact updates for removal of ?version= in GET content",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T15:23:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ac9b57fa121f980cd36bf0aeefae49e6c3139db",
"body": "[PP-7501] Simplify the get_live_content method",
"is_bot": false,
"headline": "Merge pull request #1372 from alphagov/simplify-get-live-content",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T10:00:27Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 126,
"latest_release_at": "2026-07-27T10:04:44Z",
"latest_release_tag": "v103.4.0",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 32,
"days_since_latest_release": 0,
"mean_days_between_releases": 24.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "gds-api-adapters",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/gds-api-adapters",
"is_deprecated": false,
"latest_version": "103.4.0",
"repository_url": "http://github.com/alphagov/gds-api-adapters",
"versions_count": 589,
"total_downloads": 2174538,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2011-12-06T10:30:58.554000Z",
"latest_published_at": "2026-07-27T10:07:58.002000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 13,
"stars": 21,
"watchers": 88,
"fork_history": {
"days": [
{
"date": "2013-09-11",
"count": 1
},
{
"date": "2015-02-26",
"count": 1
},
{
"date": "2015-10-07",
"count": 1
},
{
"date": "2016-05-18",
"count": 1
},
{
"date": "2016-06-23",
"count": 1
},
{
"date": "2017-05-26",
"count": 1
},
{
"date": "2019-08-29",
"count": 1
},
{
"date": "2020-09-10",
"count": 1
},
{
"date": "2020-12-25",
"count": 1
},
{
"date": "2021-04-10",
"count": 1
},
{
"date": "2026-02-23",
"count": 1
}
],
"complete": true,
"collected": 11,
"total_forks": 13
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 40393,
"source_files_sampled": 123,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Gemfile"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 22,
"direct_affected_count": 0
},
"ecosystems": [
"rubygems"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "addressable",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "byebug",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "climate_control",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "govuk_schemas",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "link_header",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "minitest",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "minitest-around",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "mocha",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "null_logger",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact-consumer-minitest",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact-mock_service",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact_broker-client",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "plek",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rack",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rack-test",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rake",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rdoc",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rest-client",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-govuk",
"direct": false,
"version": "5.2.1",
"ecosystem": "rubygems"
},
{
"name": "simplecov",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "timecop",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "webmock",
"direct": false,
"version": null,
"ecosystem": "rubygems"
}
],
"collected": true,
"truncated": false,
"total_count": 23,
"direct_count": 0,
"indirect_count": 23
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 1301,
"open_issues": 1,
"closed_ratio": 0.9,
"closed_issues": 9,
"closed_unmerged_prs": 100
},
"bus_factor": 13,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "alext",
"commits": 195,
"avatar_url": "https://avatars.githubusercontent.com/u/5560?v=4"
},
{
"type": "User",
"login": "kevindew",
"commits": 177,
"avatar_url": "https://avatars.githubusercontent.com/u/282717?v=4"
},
{
"type": "User",
"login": "barrucadu",
"commits": 156,
"avatar_url": "https://avatars.githubusercontent.com/u/75235?v=4"
},
{
"type": "User",
"login": "tijmenb",
"commits": 142,
"avatar_url": "https://avatars.githubusercontent.com/u/233676?v=4"
},
{
"type": "User",
"login": "elliotcm",
"commits": 137,
"avatar_url": "https://avatars.githubusercontent.com/u/109225?v=4"
},
{
"type": "User",
"login": "JordanHatch",
"commits": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/71922?v=4"
},
{
"type": "User",
"login": "thomasleese",
"commits": 117,
"avatar_url": "https://avatars.githubusercontent.com/u/510498?v=4"
},
{
"type": "User",
"login": "dhwthompson",
"commits": 111,
"avatar_url": "https://avatars.githubusercontent.com/u/32775?v=4"
},
{
"type": "User",
"login": "jamiecobbett",
"commits": 109,
"avatar_url": "https://avatars.githubusercontent.com/u/93739?v=4"
},
{
"type": "User",
"login": "brucebolt",
"commits": 104,
"avatar_url": "https://avatars.githubusercontent.com/u/6329861?v=4"
}
],
"contributors_sampled": 99,
"top_contributor_share": 0.062
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"actionlint.yml",
"autorelease.yml",
"ci.yml",
"publish.yml"
],
"has_docs_dir": false,
"linter_configs": [
".rubocop.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 8,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 39 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d9d389c7ea5eebdb5c6c722245da7749a75de375",
"ran_at": "2026-07-27T10:14:45Z",
"aggregate_score": 7.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T10:08:05Z",
"oldest_open_prs": [
{
"number": 1401,
"created_at": "2026-06-12T14:51:35Z",
"last_comment_at": "2026-07-08T09:03:27Z",
"last_comment_author": "yndajas"
}
],
"last_merged_pr_at": "2026-07-27T10:04:44Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 722,
"created_at": "2017-07-20T17:01:45Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/alphagov/gds-api-adapters",
"host": "github.com",
"name": "gds-api-adapters",
"owner": "alphagov"
},
"metrics": {
"overall": {
"key": "overall",
"band": "exceptional",
"name": "Overall health",
"note": "The weighted overall 79 is calibrated to 93 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 79,
"calibrated": 93,
"calibration": "2026-08-02"
}
}
],
"value": 93,
"inputs": {
"security": 82,
"vitality": 87,
"community": 62,
"governance": 92,
"calibration": "2026-08-02",
"engineering": 76,
"ai_readiness": 44,
"weighted_overall_raw": 79
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 87,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"commits_last_year": 126,
"human_commit_share": 0.85,
"days_since_last_push": 0,
"active_weeks_last_year": 32
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "32/52 weeks with commits",
"points": 22.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 32
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "126 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 126
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v103.4.0",
"releases_from_tags": true,
"days_since_latest_release": 0,
"mean_days_between_releases": 24.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~24.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 24.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 6,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 6 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 6
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 62,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"forks": 13,
"stars": 21,
"watchers": 88,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "21 stars",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 21
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "13 forks",
"points": 9,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 13
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "88 watchers",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 88
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"packages": [
"gds-api-adapters"
],
"dependents": null,
"ecosystems": "rubygems",
"total_downloads": 2174538,
"monthly_downloads": null
},
"components": [
{
"key": "total_downloads",
"name": "Total downloads",
"detail": "2,174,538 downloads all-time across rubygems",
"points": 65.9,
"status": "partial",
"details": [
{
"code": "downloads_total",
"params": {
"count": 2174538,
"ecosystems": "rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "excellent",
"name": "Sustainability & Governance",
"value": 92,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "exceptional",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"bus_factor": 13,
"contributors_sampled": 99,
"top_contributor_share": 0.062
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "13 contributor(s) cover half of all commits",
"points": 54,
"status": "met",
"details": [
{
"code": "bus_factor",
"params": {
"count": 13
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 6% of commits",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 6
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "99 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 99
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 39 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "exceptional",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 93,
"inputs": {
"merged_prs": 1301,
"open_issues": 1,
"closed_issues": 9,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.9,
"closed_unmerged_prs": 100,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "90% of issues closed",
"points": 37.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 90
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1301/1401 decided PRs merged",
"points": 27.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1301,
"decided": 1401
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"followers": 1576,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "alphagov",
"public_repos": 1528,
"account_age_days": 5653
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,576 followers of alphagov",
"points": 23,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1576,
"login": "alphagov"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "1528 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 1528
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"gds-api-adapters"
],
"ecosystems": "rubygems",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "589 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 589
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".rubocop.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"govuk"
],
"has_wiki": false,
"homepage": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "1 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 1
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "excellent",
"name": "Security",
"value": 82,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 78,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 7.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 39 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 1 resolved dependencies against OSV; 22 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 1
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 22
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 22,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 44,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.765,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "65 of 85 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 65,
"sampled": 85
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.15
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".rubocop.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "15 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 15,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Ruby",
"largest_source_bytes": 40393,
"source_files_sampled": 123,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Ruby without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Ruby"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/123 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 123,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:rubygems",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T10:15:14.238713Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/alphagov/gds-api-adapters.svg",
"full_name": "alphagov/gds-api-adapters",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit alphagov/gds-api-adapters teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.3.1, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
