[Copilot]

Consumers identify compatibility by pinned Git revision, making synchronized npm/Python version bookkeeping unnecessary. Package metadata remains fixed for local build, installation, and diagnostics.

• Automation cleanup

  • Remove weekly patch-bump workflow.
  • Remove duplicate manifest-version checks.
  • Delete scripts/version/ and root VERSION.

• Metadata behavior

  • Preserve npm and Python manifest versions, lockfile metadata, and private-package safeguards.
  • Preserve the Python server’s installed-package diagnostic version.

• Documentation

  • Define the pinned source commit as the compatibility identity.
  • Describe optional GitHub tags/releases as informational milestones.
  • Record S4 artifact-provenance enforcement as follow-up work.

• Consumer and repository coordination

  • Black still uses published npm package ^0.8.2 alongside the Python submodule; its source migration remains separate.
  • Maintainers must verify that deleted check contexts are removed from protected-branch rules.

• Fixes Retire package-version bump and synchronization automation #135

[Rich Chiodo (rchiodo)]

🔒 Automated review in progress — Rich Chiodo (@rchiodo) is auto-reviewing this PR.

[Copilot]

🟡 Changes recommended

CONTRIBUTING.md incorrectly presents same-revision source builds as universal, despite Black still using a packaged TypeScript runtime and requiring a separate B0 migration.

1 open issue

• Clarify Black’s separate B0 migration from source-based adoption · New

What changed in this PR

Retires package-version bookkeeping in favor of pinned Git revisions as the compatibility identity, while leaving package metadata and Python diagnostic version reporting unchanged.

Changes:

• Removes the weekly patch-bump workflow and both version-consistency checks.
• Deletes the root VERSION file and version-management helpers.
• Documents commit-based adoption, optional milestone releases, and deferred S4 artifact-provenance enforcement.

File	Description
VERSION	Removes the shared version source.
scripts/​version/​validate.py	Removes manifest-version validation.
scripts/​version/​sync.py	Removes manifest-version synchronization.
scripts/​version/​bump_patch.py	Removes patch-bump automation.
scripts/​version/​__init__.py	Removes shared version-management utilities.
CONTRIBUTING.md	Replaces release bookkeeping instructions with source-adoption guidance.
.github/​workflows/​version-check.yml	Removes the version-consistency check.
.github/​workflows/​pr-version.yml	Removes the duplicate version-match check.
.github/​workflows/​auto-patch-bump.yml	Removes scheduled and manual patch-bump automation.

_{Review effort: Balanced}

[Eduardo Villalpando Mello (edvilme)]

Copilot resolve the merge conflicts in this pull request

[Copilot]

Copilot resolve the merge conflicts in this pull request

Merged main and resolved the CONTRIBUTING.md conflict in merge commit 754b40b. CodeQL found no alerts; tests could not run because pytest and npm dependencies are unavailable.

[Rich Chiodo (rchiodo)]

Reviewed commit: 754b40ba811a009c144aa9e4fd772c3eb218ee92

Result: 🔴 could-not-verify

Verification details

Verification: Automated verification is best effort. The PR author remains responsible for testing.

Summary: [unavailable] Container verification could not start and local execution was not authorized for this PR HEAD: Podman machine 'pyrx-automation' is not running.

Test runs: none recorded.

[Rich Chiodo (rchiodo)]

Approved via Review Center.