🚀🧑‍💻 - 3.10.1 - Release read approval checks with the workflow token #672

Release Type

Patch

Release Version

3.10.1

Changelog

• Fix the pull request approval observer to read head and merge checks with the existing workflow-native token, while retaining the bot PAT for policy, identity and review operations.
• Preserve fail-closed behavior on unavailable or malformed check evidence; add five regression cases for token routing, read failures, malformed pages and bounded inventory.
• Document the token responsibilities and recovery of private-repository approval checks. No additional PAT permission or consumer workflow change is required.

Additional Context

Publish the frozen develop snapshot containing #670 / #671 (merged as 14950c5). The maintainer explicitly authorized publication of 3.10.1 and completion of the Platform upgrade after all applicable checks pass and no findings remain. #671 passed CI and package smoke on Linux, macOS and Windows, with complete current-head review evidence and zero findings.

After publication, verify v3.10.1, npm @vypdev/copilot@3.10.1 gitHead, the v3 Action reference and development reconciliation against the accepted production SHA. Then exercise the approval observer in vypdev/platform#204 before its protected merge and dependency setup activation.

Use the installed Action-managed release lifecycle; do not bypass protected checks or create replacement refs.