Repository navigation

Add apm (Agent Package Manager) ecosystem support - #16382

Open

Diogo-Costa wants to merge 36 commits into

dependabot:mainfrom

Diogo-Costa:feature/apm-ecosystem

Commits on Oct 9, 2026
- Add apm (Agent Package Manager) ecosystem support
  
  authored and
  v-abhishekbhaskar
  committed
  4f94bab
- Address PR review for apm ecosystem
  
  authored and
  v-abhishekbhaskar
  committed
  939ea6d
- Address second apm PR review round
  
  authored and
  v-abhishekbhaskar
  committed
  69f917a
- Fix apm file_parser spec under isolated CI test runner
  
  authored and
  v-abhishekbhaskar
  committed
  1c2c43c
- Fix same-line duplicate ref bumps and nested non-GitHub repos
  
  authored and
  v-abhishekbhaskar
  committed
  e9781cf
- Enforce SemVer semantics, deep GitLab metadata, case-insensitive host
  
  authored and
  v-abhishekbhaskar
  committed
  d277b50
- Make APM git tag resolution strict SemVer aware
  
  authored and
  v-abhishekbhaskar
  committed
  194cc29
- Update apm lockfile ref on bump and parse apm CLI version permissively
  
  authored and
  v-abhishekbhaskar
  committed
  185f191
- Bump apm file_fetcher to `# typed: strong`
  
  authored and
  v-abhishekbhaskar
  committed
  4f68767
- Align apm lockfile updater with the real apm.lock.yaml schema
  
  authored and
  v-abhishekbhaskar
  committed
  d7efcab
- Register apm in production updater and match lockfile identity by host + repo_url
  
  authored and
  v-abhishekbhaskar
  committed
  a1c7ba3
- Do not rewrite apm.lock.yaml; leave it for APM to re-resolve on drift
  
  authored and
  v-abhishekbhaskar
  committed
  5b724d7
- Match prerelease requirement bounds with SemVer ordering
  
  authored and
  v-abhishekbhaskar
  committed
  11fb024
- Harden apm manifest parsing against valid-but-unsupported inputs
  
  authored and
  v-abhishekbhaskar
  committed
  18a8b90
- Fix apm dependency identity for case-sensitive hosts and non-APM images
  
  authored and
  v-abhishekbhaskar
  committed
  aa09394
- Skip apm scalars whose decoding differs from their source span
  
  authored and
  v-abhishekbhaskar
  committed
  2c7fec5
- Document unsupported apm scalar spellings in README scope
  
  authored and
  v-abhishekbhaskar
  committed
  adc33ea
- Strip the manifest default host from apm dependency names
  
  authored and
  v-abhishekbhaskar
  committed
  dc08d5a
- Recognise GitHub Enterprise Cloud (*.ghe.com) as GitHub family
  
  authored and
  v-abhishekbhaskar
  committed
  1e2aeca
- Skip Azure DevOps hosts and preserve trailing whitespace on update
  
  authored and
  v-abhishekbhaskar
  committed
  862b117
- Drop non-https ports from explicit clone URLs
  
  authored and
  v-abhishekbhaskar
  committed
  2b5bfb0
- Classify hosts by hostname and skip http/git clone URLs
  
  authored and
  v-abhishekbhaskar
  committed
  f77435b
- Don't downgrade higher refs when rewriting merged requirements
  
  authored and
  v-abhishekbhaskar
  committed
  7f72b1a
- Handle uppercase URI schemes and pessimistic version constraints
  
  authored and
  v-abhishekbhaskar
  committed
  1fea8bb
- Address round-22 review: identity, tags, and production classification
  
  authored and
  v-abhishekbhaskar
  committed
  b4667b9
- Recognise package-scoped tags in the parser and update checker
  
  authored and
  v-abhishekbhaskar
  committed
  a201507
- Preserve custom-port authority in APM metadata source lookup
  
  authored and
  v-abhishekbhaskar
  committed
  6b6f3c3
- Fix APM identity ports, per-requirement tag families, and beta error
  
  authored and
  v-abhishekbhaskar
  committed
  5569a22
- Make BETA_DISABLED_MESSAGE a plain frozen literal for Sorbet strict
  
  authored and
  v-abhishekbhaskar
  committed
  7d4a315
- Resolve tags per-requirement across families and register apm in dry-run
  
  authored and
  v-abhishekbhaskar
  committed
  c2ec1c7
- Detect vulnerability per requirement ref, not just the merged version
  
  authored and
  v-abhishekbhaskar
  committed
  f104e65
- Report merged version from lowest post-update pin, not the max tag
  
  authored and
  v-abhishekbhaskar
  committed
  10329c4
- Allow apm in bin/dry-run.rb package-manager allowlist
  
  authored and
  v-abhishekbhaskar
  committed
  d3be314
- Fix apm security-fix recognition and per-declaration cooldown for merged deps
  
  authored and
  v-abhishekbhaskar
  committed
  9f6cdc2
- Dedupe lockfile version parsing and fix manifest file matching
  
  v-abhishekbhaskar
  and
  Copilot
  committed
  9ae6e65
- APM: drop unreachable security-update logic
  
  authored and
  v-abhishekbhaskar
  committed
  c9e82e8

Commits

Commits on Oct 9, 2026