Merge pull request 'docs(deps): update CONVENTIONS.md allowlist for go-yaml' (#108 ) from review-bot-issue-91 into main

Reviewed-on: #108 Reviewed-by: security-review-bot <10+security-review-bot@noreply.gitea.weiker.me> Reviewed-by: Aaron Weiker <aaron@weiker.org>
docs(deps): update CONVENTIONS.md allowlist for go-yaml
2026-05-13 13:16:40 +00:00 · 2026-05-13 02:56:06 -07:00 · 2026-05-13 03:47:01 +00:00
1 changed files with 1 additions and 3 deletions
@@ -9,7 +9,7 @@
 | Package | Use Case | Scope |
 |---------|----------|-------|
-| `github.com/goccy/go-yaml` | YAML parsing (persona files, config) | production |
+| `github.com/goccy/go-yaml` | YAML parsing and AST inspection (subpkgs: `ast`, `parser`) | production |
 | `github.com/google/go-cmp` | Test comparisons (`cmp.Diff`) | test only |
 **Any import not in this table or the Go standard library is forbidden.**
@@ -21,8 +21,6 @@ To request a new dependency:
 2. Requires explicit approval from Aaron
 3. After merge, a separate PR may use the package
 <!-- Deviation from step 1+3 for go-yaml migration: see #91 for rationale. -->
 *Enforcement: `scripts/check-deps.sh` parses this table — update only here.*
 ## Error Handling
Author	SHA1	Message	Date
aweiker	881ce232eb	Merge pull request 'docs(deps): update CONVENTIONS.md allowlist for go-yaml' (#108 ) from review-bot-issue-91 into main CI / test (push) Successful in 17s Details CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (push) Has been skipped Details CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (push) Has been skipped Details CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (push) Has been skipped Details Reviewed-on: #108 Reviewed-by: security-review-bot <10+security-review-bot@noreply.gitea.weiker.me> Reviewed-by: Aaron Weiker <aaron@weiker.org>	2026-05-13 13:16:40 +00:00
claw	bf52fceea0	docs(deps): update CONVENTIONS.md allowlist for go-yaml CI / test (pull_request) Successful in 20s Details CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (pull_request) Successful in 20s Details CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (pull_request) Successful in 48s Details CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (pull_request) Successful in 51s Details Update the approved dependency table to document go-yaml subpackage usage (ast, parser) and remove the deviation comment now that the proper allowlist process is being followed. Closes #91	2026-05-13 02:56:06 -07:00
aweiker	d722035629	Merge pull request 'fix(deps): replace gopkg.in/yaml.v3 with github.com/goccy/go-yaml' (#89 ) from review-bot-issue-87 into main CI / test (push) Successful in 20s Details CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (push) Has been skipped Details CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (push) Has been skipped Details CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (push) Has been skipped Details Reviewed-on: #89 Reviewed-by: security-review-bot <10+security-review-bot@noreply.gitea.weiker.me> Reviewed-by: Aaron Weiker <aaron@weiker.org>	2026-05-13 03:47:01 +00:00