39790843932
73%

Ran 22 Oct 2026 02:02PM UTC

Jobs 1

Files 967

Run time 1min

Badge

Embed ▾

Committed 22 Oct 2026 01:53PM UTC coverage: 71.539% (+0.05%) from 71.492%

Build # 39790843932

Build Type

push

github

Committed by

web-flow

Commit Message

Parse SKILL.md with maintained YAML fork (#6919)

gopkg.in/yaml.v3 v3.0.1 panics with "hash of unhashable type" when a
mapping holds a merge key next to a mapping-valued key, so a crafted
SKILL.md crashes ParseSkillMD instead of returning an error. OSS-Fuzz
found this through FuzzParseSkillMD (testcase 4870994700075008).

Switch pkg/skills to go.yaml.in/yaml/v3, the maintained fork with the
same API, which returns an error for this input. The parser, the
StringOrSlice unmarshaler and its test move together because a custom
UnmarshalYAML only fires when the decoder comes from the same library.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Coverage Stats

88594 of 123841 relevant lines covered (71.54%)

127.21 hits per line

Coverage Regressions

Lines	Coverage	∆	File
3	64.0	4.79%	pkg/workloads/manager.go
2	94.59	-1.8%	pkg/cache/validating_cache.go
1	96.77	-3.23%	pkg/foreach/foreach.go
1	94.49	-0.79%	pkg/vmcp/composer/dag_executor.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	39790843932.1	22 Oct 2026 02:02PM UTC	967	71.54	GitHub Action Run

stacklok / toolhive / 39790843932
73%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 39790843932

stacklok / toolhive / 39790843932 73%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 39790843932

stacklok / toolhive / 39790843932
73%

README BADGES
x