)]}'
{
  "commit": "6459577f88ef42498ca659d53a00c93facfcc6d9",
  "tree": "0be13d4b04741f74e9b9d364b2b0181dac254bd9",
  "parents": [
    "f0d33242b45fff401356c5c37d04bb9e351240c1"
  ],
  "author": {
    "name": "Richard Levasseur",
    "email": "richardlev@gmail.com",
    "time": "Thu Oct 22 00:06:30 2026 -0700"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Thu Oct 22 00:06:30 2026 -0700"
  },
  "message": "agents: add composite action dependabot, secret PR, and merge queue rules (#4307)\n\nComposite actions under .github/actions/ can be missed by Dependabot and\nsecret-gated workflow steps do not run on fork PRs. Also, gh pr merge\nrejects --delete-branch when a merge queue is enabled. Update workflow\nand merge guidance so agents keep composite actions updated, test\nsecret-gated changes from upstream branches, and omit --delete-branch\nwhen merging.",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "dfec2b092a400a2718008d92aeb05de00facb5aa",
      "old_mode": 33188,
      "old_path": ".agents/rules/github_actions_workflows.md",
      "new_id": "f4c2892ac8a5d34a666bab7f853835de8db69ed2",
      "new_mode": 33188,
      "new_path": ".agents/rules/github_actions_workflows.md"
    },
    {
      "type": "modify",
      "old_id": "f05a760d31e343e0c7577c376aa7ee540e9d1246",
      "old_mode": 33188,
      "old_path": ".agents/skills/merge-pr/SKILL.md",
      "new_id": "f410692a2b8d8c468fd686a979d1331ff153826f",
      "new_mode": 33188,
      "new_path": ".agents/skills/merge-pr/SKILL.md"
    },
    {
      "type": "modify",
      "old_id": "4543704936ecc5f532babbab71b542d66cbb87f5",
      "old_mode": 33188,
      "old_path": ".agents/skills/review-code/review-workflows-prompt.md",
      "new_id": "c0ef0d05206bcaa00003cd9583a3b191fef9c0f9",
      "new_mode": 33188,
      "new_path": ".agents/skills/review-code/review-workflows-prompt.md"
    }
  ]
}