From 05b5dfe7ad2207847921164c3667d1dce116cc69 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 29 Sep 2026 00:32:44 +0000
Subject: [PATCH 1/9] Update opentelemetry-sdk requirement from >=1.44.0 to
 >=1.45.0

Updates the requirements on [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) to permit the latest version.
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.44.0...v1.45.0)

---
updated-dependencies:
- dependency-name: opentelemetry-sdk
  dependency-version: 1.45.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index c4c1b88..8139960 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,7 +11,7 @@ defusedxml>=0.7.1
 PyYAML>=6.0.3
 pyarrow>=25.0.1
 opentelemetry-api>=1.44.0
-opentelemetry-sdk>=1.44.0
+opentelemetry-sdk>=1.45.0
 msal>=1.39.0
 boxsdk>=10.15.0,<11
 tomli; python_version<"3.11"
\ No newline at end of file

From 91a0eb2e55444448804480bed94ee1f39b54eb09 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 29 Sep 2026 00:33:21 +0000
Subject: [PATCH 2/9] Update opentelemetry-api requirement from >=1.44.0 to
 >=1.45.0

Updates the requirements on [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) to permit the latest version.
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.44.0...v1.45.0)

---
updated-dependencies:
- dependency-name: opentelemetry-api
  dependency-version: 1.45.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index c4c1b88..1121df7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -10,7 +10,7 @@ watchdog
 defusedxml>=0.7.1
 PyYAML>=6.0.3
 pyarrow>=25.0.1
-opentelemetry-api>=1.44.0
+opentelemetry-api>=1.45.0
 opentelemetry-sdk>=1.44.0
 msal>=1.39.0
 boxsdk>=10.15.0,<11

From b196f715c7ab64a19b3fd8ddd93991890441592c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Oct 2026 00:33:05 +0000
Subject: [PATCH 3/9] Update cryptography requirement from >=50.0.1 to >=50.0.2

Updates the requirements on [cryptography](https://github.com/pyca/cryptography) to permit the latest version.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/50.0.1...50.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 dev_requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dev_requirements.txt b/dev_requirements.txt
index aa1b519..18d9143 100644
--- a/dev_requirements.txt
+++ b/dev_requirements.txt
@@ -3,7 +3,7 @@ google-api-python-client
 google-auth-httplib2
 google-auth-oauthlib
 APScheduler
-cryptography>=50.0.1
+cryptography>=50.0.2
 prometheus_client>=0.25.0
 defusedxml>=0.7.1
 twine

From b4052c02de9e2da6d538b62d9768abfb88fc0f2e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Oct 2026 00:33:17 +0000
Subject: [PATCH 4/9] Update boxsdk requirement from <11,>=10.15.0 to
 >=10.17.0,<11

Updates the requirements on [boxsdk](https://github.com/box/box-python-sdk) to permit the latest version.
- [Release notes](https://github.com/box/box-python-sdk/releases)
- [Changelog](https://github.com/box/box-python-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/box/box-python-sdk/compare/v10.15.0...v10.17.0)

---
updated-dependencies:
- dependency-name: boxsdk
  dependency-version: 10.17.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index c4c1b88..d4b4b22 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,5 +13,5 @@ pyarrow>=25.0.1
 opentelemetry-api>=1.44.0
 opentelemetry-sdk>=1.44.0
 msal>=1.39.0
-boxsdk>=10.15.0,<11
+boxsdk>=10.17.0,<11
 tomli; python_version<"3.11"
\ No newline at end of file

From d0bc67ad6c33c0c127c3e4a59fcb0e28fd15fdf5 Mon Sep 17 00:00:00 2001
From: JeffreyChen <zenxcvwait@gmail.com>
Date: Thu, 8 Oct 2026 15:30:14 +0800
Subject: [PATCH 5/9] Exit 1 from the legacy CLI flags when an action failed

The executor records a failed action and runs the next one, so the
process ended with status 0 whatever happened. The executor now counts
the actions that failed, and the entry point compares the count before
and after the legacy dispatch and exits 1 with "N action(s) failed".
---
 README.md                               |  2 ++
 README.zh-CN.md                         |  2 ++
 README.zh-TW.md                         |  2 ++
 architecture.md                         |  5 +++-
 automation_file/__main__.py             |  8 +++++-
 automation_file/core/action_executor.py | 18 +++++++++++++
 docs/source/Eng/usage/cli.rst           |  7 +++++
 docs/source/Zh-CN/usage/cli.rst         |  7 +++++
 docs/source/Zh-TW/usage/cli.rst         |  7 +++++
 docs/updates/2026-10.md                 | 10 +++++++
 docs/updates/README.md                  |  3 ++-
 tests/test_cli_main.py                  | 35 +++++++++++++++++++++++++
 tests/test_legacy_cli_contract.py       | 33 +++++++++++++++++++++++
 13 files changed, 136 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index ed85aee..dd12ffc 100644
--- a/README.md
+++ b/README.md
@@ -929,6 +929,8 @@ python -m automation_file --execute_str '[["FA_create_dir",{"dir_path":"x"}]]'
 python -m automation_file --create_project ./my_project
 ```
 
+The legacy flags exit with status 1 when an action of the list failed, after the rest of the list has run, and print `error: N action(s) failed` on stderr.
+
 ## JSON action format
 
 Each entry is either a bare command name, a `[name, kwargs]` pair, or a
diff --git a/README.zh-CN.md b/README.zh-CN.md
index ce4e224..4df9eae 100644
--- a/README.zh-CN.md
+++ b/README.zh-CN.md
@@ -910,6 +910,8 @@ python -m automation_file --execute_str '[["FA_create_dir",{"dir_path":"x"}]]'
 python -m automation_file --create_project ./my_project
 ```
 
+旧式标志在清单中有动作失败时，会在其余动作执行完之后以状态 1 结束，并在 stderr 打印 `error: N action(s) failed`。
+
 ## JSON 动作格式
 
 每一项动作可以是单纯的命令名称、`[name, kwargs]` 组合，或 `[name, args]`
diff --git a/README.zh-TW.md b/README.zh-TW.md
index 49352f4..dc2e3de 100644
--- a/README.zh-TW.md
+++ b/README.zh-TW.md
@@ -910,6 +910,8 @@ python -m automation_file --execute_str '[["FA_create_dir",{"dir_path":"x"}]]'
 python -m automation_file --create_project ./my_project
 ```
 
+舊式旗標在清單中有動作失敗時，會在其餘動作執行完之後以狀態 1 結束，並在 stderr 印出 `error: N action(s) failed`。
+
 ## JSON 動作格式
 
 每一項動作可以是單純的指令名稱、`[name, kwargs]` 組合，或 `[name, args]`
diff --git a/architecture.md b/architecture.md
index bf590df..59f2092 100644
--- a/architecture.md
+++ b/architecture.md
@@ -134,7 +134,10 @@ ActionExecutor() → build_default_registry(): local + http + utils + drive comm
   contract, guarded by `tests/test_legacy_cli_contract.py`. PyBreeze also declares `automation-file` as
   a dependency.
 - **TestPioneer** imports `download_file` and `unzip_all` from the facade in-process
-  (`test_pioneer/executor/file/file_processing.py`). Its `parallel_run` does not spawn this package.
+  (`test_pioneer/executor/file/file_processing.py`). Its `file-runner` runs an action file through
+  `execute_action` in-process, and `parallel_run` spawns `python -m automation_file --execute_file <script>`
+  and reads the exit status: 1 when an action failed (`ActionExecutor.failure_count`, compared by
+  `__main__.main`), guarded by `tests/test_legacy_cli_contract.py`.
 - **Names inherited from AutoControl**: the TCP starter is still called `start_autocontrol_socket_server`
   and the action-dict key is `auto_control`. MailThunder has renamed both (`start_mail_thunder_socket_server`, `mail_thunder` key) and keeps the old names as deprecated aliases. MailThunder's
   socket-server default is 9942, so it runs next to this package's servers (TCP 9943, HTTP 9944,
diff --git a/automation_file/__main__.py b/automation_file/__main__.py
index 5e48c92..8d350be 100644
--- a/automation_file/__main__.py
+++ b/automation_file/__main__.py
@@ -19,7 +19,7 @@
 from collections.abc import Callable
 from typing import Any
 
-from automation_file.core.action_executor import execute_action, execute_files
+from automation_file.core.action_executor import execute_action, execute_files, executor
 from automation_file.core.json_store import read_action_json
 from automation_file.exceptions import ArgparseException
 from automation_file.local.file_ops import create_file
@@ -235,6 +235,7 @@ def main(argv: list[str] | None = None) -> int:
         return args.handler(args)
 
     ran = False
+    failed_before = executor.failure_count
     for key, handler in _LEGACY_DISPATCH.items():
         value = getattr(args, key, None)
         if value is None:
@@ -243,6 +244,11 @@ def main(argv: list[str] | None = None) -> int:
         ran = True
     if not ran:
         raise ArgparseException("no argument supplied; try --help")
+    # A failed action does not stop the batch, so it is reported once the batch is done.
+    failed = executor.failure_count - failed_before
+    if failed:
+        print(f"error: {failed} action(s) failed", file=sys.stderr)
+        return 1
     return 0
 
 
diff --git a/automation_file/core/action_executor.py b/automation_file/core/action_executor.py
index 460be8a..95f3786 100644
--- a/automation_file/core/action_executor.py
+++ b/automation_file/core/action_executor.py
@@ -15,6 +15,7 @@
 
 from __future__ import annotations
 
+import threading
 import time
 from collections.abc import Mapping
 from concurrent.futures import ThreadPoolExecutor
@@ -62,6 +63,8 @@ class ActionExecutor(_CoreActionExecutor):
 
     def __init__(self, registry: ActionRegistry | None = None) -> None:
         super().__init__(_SETTINGS, registry or build_default_registry())
+        self._failures = 0
+        self._failures_lock = threading.Lock()
         self.registry.register_many(
             {
                 "FA_execute_action": self.execute_action,
@@ -84,6 +87,18 @@ def _parse_action(action: list) -> ParsedAction:
         return _PARSER.parse(action)
 
     # Public API --------------------------------------------------------
+    @property
+    def failure_count(self) -> int:
+        """How many actions have failed in this executor since it was created.
+
+        A failed action is recorded as ``repr(error)`` and the batch goes on, so
+        the return value of ``execute_action`` does not say whether anything
+        failed. A caller that must know (the CLI, for its exit status) compares
+        this count before and after. Dry runs are not counted.
+        """
+        with self._failures_lock:
+            return self._failures
+
     def validate(self, action_list: list | Mapping[str, Any]) -> list[str]:
         """Validate shape and resolve every name; return the list of action names.
 
@@ -179,6 +194,9 @@ def _run_one(self, action: list, dry_run: bool, display: list | None = None) ->
             return repr(error)
         finally:
             record_action(name, time.monotonic() - started, ok)
+            if not ok:
+                with self._failures_lock:
+                    self._failures += 1
 
     def _run_dry(self, action: list, display: list | None = None) -> Any:
         display_action = action if display is None else display
diff --git a/docs/source/Eng/usage/cli.rst b/docs/source/Eng/usage/cli.rst
index 1b5c543..02787e8 100644
--- a/docs/source/Eng/usage/cli.rst
+++ b/docs/source/Eng/usage/cli.rst
@@ -23,3 +23,10 @@ Subcommands for one-shot operations::
 The ``mcp`` subcommand starts a Model Context Protocol server over stdio so
 hosts such as Claude Desktop can call ``FA_*`` actions as MCP tools — see
 :doc:`mcp` for the full integration guide.
+
+Exit status of the legacy flags
+-------------------------------
+
+``-e``, ``-d`` and ``--execute_str`` exit with status 1 when an action of the list failed. A failed
+action does not stop the list: the rest runs first, and ``error: N action(s) failed`` is printed on
+stderr at the end. A script that cannot be read exits with 1 as before.
diff --git a/docs/source/Zh-CN/usage/cli.rst b/docs/source/Zh-CN/usage/cli.rst
index 1de5e1b..a4b1351 100644
--- a/docs/source/Zh-CN/usage/cli.rst
+++ b/docs/source/Zh-CN/usage/cli.rst
@@ -23,3 +23,10 @@ CLI
 ``mcp`` 子命令通过 stdio 启动 Model Context Protocol 服务器，
 让 Claude Desktop 这类宿主可以把 ``FA_*`` 动作当作 MCP 工具调用——完整集成
 说明请见 :doc:`mcp`。
+
+旧式标志的结束状态
+------------------
+
+``-e``、``-d`` 与 ``--execute_str`` 在清单中有动作失败时以状态 1 结束。失败的动作不会中止清单：
+其余动作会先执行完，最后在 stderr 打印 ``error: N action(s) failed``。
+无法读取的脚本和以前一样以 1 结束。
diff --git a/docs/source/Zh-TW/usage/cli.rst b/docs/source/Zh-TW/usage/cli.rst
index fec45d0..712fa85 100644
--- a/docs/source/Zh-TW/usage/cli.rst
+++ b/docs/source/Zh-TW/usage/cli.rst
@@ -23,3 +23,10 @@ CLI
 ``mcp`` 子指令以 stdio 啟動 Model Context Protocol 伺服器，
 讓 Claude Desktop 之類的宿主可把 ``FA_*`` 動作當成 MCP 工具呼叫——
 完整整合說明請見 :doc:`mcp`。
+
+舊式旗標的結束狀態
+------------------
+
+``-e``、``-d`` 與 ``--execute_str`` 在清單中有動作失敗時以狀態 1 結束。失敗的動作不會中止清單：
+其餘動作會先執行完，最後在 stderr 印出 ``error: N action(s) failed``。
+無法讀取的腳本和以前一樣以 1 結束。
diff --git a/docs/updates/2026-10.md b/docs/updates/2026-10.md
index ac8c919..de1cc07 100644
--- a/docs/updates/2026-10.md
+++ b/docs/updates/2026-10.md
@@ -192,3 +192,13 @@ Index and query commands: [README.md](README.md). New entries go at the end.
 - **Docs**: `CLAUDE.md` › Branching & CI and `architecture.md` §2 and §3 say how the jobs build and what to regenerate when the build requirement changes. The READMEs and the Sphinx pages do not describe the publish jobs, so they are unchanged.
 - **Files**: `.github/requirements/publish.in`, `.github/requirements/publish.txt`, `.github/workflows/ci-dev.yml`, `.github/workflows/publish.yml`, `tests/test_workflow_actions.py`, `tests/test_dev_release.py`, `CLAUDE.md`, `architecture.md`, `progress.md`.
 - **Open items**: none. `publish.yml` runs only on `main`, so its build step takes effect, and is first exercised, when `dev` is merged.
+
+## U-20261008-01 · 2026-10-08 · The legacy CLI flags exit 1 when an action failed · #feature #cli #testpioneer
+
+- **What**: `python -m automation_file` with `-e`, `-d` or `--execute_str` ended with status 0 whatever happened, because the executor records a failed action as `repr(error)` and runs the next one. `ActionExecutor` now counts the actions that failed (`failure_count`, thread-safe, dry runs excluded), `__main__.main` compares the count before and after the legacy dispatch, and the process exits 1 with `error: N action(s) failed` on stderr. The rest of the list still runs first.
+- **Why**: TestPioneer's `parallel_run` starts `--execute_file` and reads the exit status (its `docs/artifacts.rst`, "Native Support"), and a CI job does the same. LoadDensity made the same change in its PR #118.
+- **Effect on callers**: a script with a failing action ends with status 1 where it ended with 0. PyBreeze only displays the status. `execute_action` and its return value are unchanged.
+- **Also**: `architecture.md` §6 said TestPioneer's `parallel_run` does not spawn this package; it does, for its `file-runner`.
+- **Tests**: `tests/test_legacy_cli_contract.py` +4 (real child processes), `tests/test_cli_main.py` +3.
+- **Docs**: `README.md`, `README.zh-TW.md`, `README.zh-CN.md`, `docs/source/{Eng,Zh-TW,Zh-CN}/usage/cli.rst`, `architecture.md` §6.
+- **Files**: `automation_file/core/action_executor.py`, `automation_file/__main__.py`, the tests and docs above.
diff --git a/docs/updates/README.md b/docs/updates/README.md
index 5308af4..75f76b4 100644
--- a/docs/updates/README.md
+++ b/docs/updates/README.md
@@ -58,6 +58,7 @@ In the same commit: delete the item from `progress.md`, add a `#done` entry here
 
 | ID | Date | Title | Tags | Batch |
 |---|---|---|---|---|
+| U-20261008-01 | 2026-10-08 | The legacy CLI flags exit 1 when an action failed | #feature #cli #testpioneer | [2026-10](2026-10.md) |
 | U-20261001-11 | 2026-10-01 | The publish jobs build with the locked setuptools | #done #ci #security #X-13 | [2026-10](2026-10.md) |
 | U-20261001-10 | 2026-10-01 | The publish jobs install hash-locked build tools | #done #ci #security #deps | [2026-10](2026-10.md) |
 | U-20261001-09 | 2026-10-01 | The source distributions stop carrying the tests | #done #packaging #tests | [2026-10](2026-10.md) |
@@ -95,5 +96,5 @@ In the same commit: delete the item from `progress.md`, add a `#done` entry here
 
 | File | Period | Entries |
 |---|---|---:|
-| [2026-10.md](2026-10.md) | 2026-10 | 11 |
+| [2026-10.md](2026-10.md) | 2026-10 | 12 |
 | [2026-09.md](2026-09.md) | 2026-09 | 21 |
diff --git a/tests/test_cli_main.py b/tests/test_cli_main.py
index a0c9389..2277431 100644
--- a/tests/test_cli_main.py
+++ b/tests/test_cli_main.py
@@ -95,3 +95,38 @@ def test_execute_str_accepts_double_encoded_payload(
 
     assert rc == 0
     assert received == [actions]
+
+
+def test_legacy_flag_returns_1_when_an_action_failed(
+    tmp_path: Any, capsys: pytest.CaptureFixture[str]
+) -> None:
+    actions = tmp_path / "actions.json"
+    actions.write_text(json.dumps([["FA_no_such_action"], ["FA_no_such_action"]]), encoding="utf-8")
+
+    assert cli_main.main(["--execute_file", str(actions)]) == 1
+    assert "error: 2 action(s) failed" in capsys.readouterr().err
+
+
+def test_legacy_flag_returns_0_when_every_action_passed(tmp_path: Any) -> None:
+    target = tmp_path / "created.txt"
+    actions = tmp_path / "actions.json"
+    actions.write_text(
+        json.dumps([["FA_create_file", {"file_path": str(target), "content": "x"}]]),
+        encoding="utf-8",
+    )
+
+    assert cli_main.main(["--execute_file", str(actions)]) == 0
+    assert target.exists()
+
+
+def test_failures_of_an_earlier_run_are_not_counted_again(tmp_path: Any) -> None:
+    bad = tmp_path / "bad.json"
+    bad.write_text(json.dumps([["FA_no_such_action"]]), encoding="utf-8")
+    good = tmp_path / "good.json"
+    good.write_text(
+        json.dumps([["FA_create_file", {"file_path": str(tmp_path / "x.txt"), "content": "x"}]]),
+        encoding="utf-8",
+    )
+
+    assert cli_main.main(["--execute_file", str(bad)]) == 1
+    assert cli_main.main(["--execute_file", str(good)]) == 0
diff --git a/tests/test_legacy_cli_contract.py b/tests/test_legacy_cli_contract.py
index c1285f7..f5f1789 100644
--- a/tests/test_legacy_cli_contract.py
+++ b/tests/test_legacy_cli_contract.py
@@ -90,6 +90,39 @@ def test_create_project(tmp_path, flag):
     assert any(project.rglob("*.json")), result.stdout + result.stderr
 
 
+def _failing_actions(target: Path) -> list:
+    """An action that fails (no command has that name), then one that writes *target*."""
+    return [["FA_no_such_action"], *_actions(target)]
+
+
+@pytest.mark.parametrize("flag", ["-e", "--execute_file"])
+def test_a_failed_action_exits_1_after_the_rest_ran(tmp_path, flag):
+    target = tmp_path / "created.txt"
+    action_file = tmp_path / "actions.json"
+    action_file.write_text(json.dumps(_failing_actions(target)), encoding="utf-8")
+    result = _run_cli(tmp_path, flag, str(action_file))
+    assert result.returncode == 1
+    assert "error: 1 action(s) failed" in result.stderr
+    assert target.exists(), result.stdout + result.stderr
+
+
+def test_a_failed_action_in_a_directory_exits_1(tmp_path):
+    action_dir = tmp_path / "actions"
+    action_dir.mkdir()
+    (action_dir / "a_ok.json").write_text(
+        json.dumps(_actions(tmp_path / "a.txt")), encoding="utf-8"
+    )
+    (action_dir / "b_bad.json").write_text(
+        json.dumps(_failing_actions(tmp_path / "b.txt")), encoding="utf-8"
+    )
+    assert _run_cli(tmp_path, "--execute_dir", str(action_dir)).returncode == 1
+
+
+def test_a_failed_action_in_execute_str_exits_1(tmp_path):
+    payload = _pybreeze_execute_str(_failing_actions(tmp_path / "created.txt"))
+    assert _run_cli(tmp_path, "--execute_str", payload).returncode == 1
+
+
 def test_no_flag_exits_non_zero(tmp_path):
     assert _run_cli(tmp_path).returncode != 0
 

From 9c4e77e49bb06d4e37fd9275ef2d660e190de2a3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 8 Oct 2026 10:56:19 +0000
Subject: [PATCH 6/9] build(deps-dev): update prometheus-client requirement

Updates the requirements on [prometheus-client](https://github.com/prometheus/client_python) to permit the latest version.
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](https://github.com/prometheus/client_python/compare/v0.25.0...v0.26.0)

---
updated-dependencies:
- dependency-name: prometheus-client
  dependency-version: 0.26.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 dev_requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dev_requirements.txt b/dev_requirements.txt
index aa1b519..3dba72a 100644
--- a/dev_requirements.txt
+++ b/dev_requirements.txt
@@ -4,7 +4,7 @@ google-auth-httplib2
 google-auth-oauthlib
 APScheduler
 cryptography>=50.0.1
-prometheus_client>=0.25.0
+prometheus_client>=0.26.0
 defusedxml>=0.7.1
 twine
 build

From d8837ac8dfa1d3b7329a67b72b372c34d35451c0 Mon Sep 17 00:00:00 2001
From: JeffreyChen <zenxcvwait@gmail.com>
Date: Sun, 11 Oct 2026 15:43:32 +0800
Subject: [PATCH 7/9] Make circuit breaker state tests independent of wall
 clock timing

---
 docs/updates/2026-10.md       |  7 +++++++
 docs/updates/README.md        |  3 ++-
 tests/test_circuit_breaker.py | 22 ++++++++++++++++------
 3 files changed, 25 insertions(+), 7 deletions(-)

diff --git a/docs/updates/2026-10.md b/docs/updates/2026-10.md
index 0795568..adbce40 100644
--- a/docs/updates/2026-10.md
+++ b/docs/updates/2026-10.md
@@ -744,3 +744,10 @@ Index and query commands: [README.md](README.md). New entries go at the end.
 - **Tests**: `tests/test_legacy_cli_contract.py` +4 (real child processes), `tests/test_cli_main.py` +3.
 - **Docs**: `README.md`, `README.zh-TW.md`, `README.zh-CN.md`, `docs/source/{Eng,Zh-TW,Zh-CN}/usage/cli.rst`, `architecture.md` §6.
 - **Files**: `automation_file/core/action_executor.py`, `automation_file/__main__.py`, the tests and docs above.
+
+## U-20261011-01 · 2026-10-11 · Integrate open pull requests and stabilize circuit breaker tests · #ci #tests #dependencies
+
+- **What**: integrate the dependency updates, the legacy CLI failure exit status (#108), and the roadmap (#107) into the storage implementation branch (#109). Resolve adjacent dependency edits without losing either minimum version, retain the CLI and storage documentation in all three languages, and give the CLI update log its own ID (`U-20261008-39`).
+- **CI finding**: main run 38042168722 failed `test_opens_after_threshold_failures` after the 0.1-second recovery timeout elapsed before the assertion. Replace wall-clock timing with a controlled monotonic clock in the threshold and recovery tests; production behavior is unchanged.
+- **Validation**: 52 CLI/executor tests, 43 dependency-related tests against the five updated package versions, and eight circuit breaker tests pass locally. Ruff lint/format and mypy checks pass. New GitHub Actions runs were queued during review; the original PR checks passed.
+- **Files**: `tests/test_circuit_breaker.py`, the merged CLI code and documentation, dependency requirement files, and the update-log index.
diff --git a/docs/updates/README.md b/docs/updates/README.md
index 4cd8ea1..34cffae 100644
--- a/docs/updates/README.md
+++ b/docs/updates/README.md
@@ -58,6 +58,7 @@ In the same commit: delete the item from `progress.md`, add a `#done` entry here
 
 | ID | Date | Title | Tags | Batch |
 |---|---|---|---|---|
+| U-20261011-01 | 2026-10-11 | Integrate open pull requests and stabilize circuit breaker tests | #ci #tests #dependencies | [2026-10](2026-10.md) |
 | U-20261008-39 | 2026-10-08 | The legacy CLI flags exit 1 when an action failed | #feature #cli #testpioneer | [2026-10](2026-10.md) |
 | U-20261008-38 | 2026-10-08 | Integrate the PyBreeze all-extras dependency before stable release | #done #dependencies | [2026-10](2026-10.md) |
 | U-20261008-37 | 2026-10-08 | Main PR validation passes the full CI and analysis gates | #done #ci #security | [2026-10](2026-10.md) |
@@ -134,5 +135,5 @@ In the same commit: delete the item from `progress.md`, add a `#done` entry here
 
 | File | Period | Entries |
 |---|---|---:|
-| [2026-10.md](2026-10.md) | 2026-10 | 45 |
+| [2026-10.md](2026-10.md) | 2026-10 | 51 |
 | [2026-09.md](2026-09.md) | 2026-09 | 21 |
diff --git a/tests/test_circuit_breaker.py b/tests/test_circuit_breaker.py
index eee5592..5de1fce 100644
--- a/tests/test_circuit_breaker.py
+++ b/tests/test_circuit_breaker.py
@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-import time
+from types import SimpleNamespace
 
 import pytest
 
@@ -10,13 +10,23 @@
 from automation_file.exceptions import CircuitOpenException
 
 
+@pytest.fixture
+def breaker_clock(monkeypatch: pytest.MonkeyPatch) -> list[float]:
+    clock = [100.0]
+    monkeypatch.setattr(
+        "automation_file.core.circuit_breaker.time",
+        SimpleNamespace(monotonic=lambda: clock[0]),
+    )
+    return clock
+
+
 def test_closed_passes_through() -> None:
     cb = CircuitBreaker(failure_threshold=3, recovery_timeout=0.1)
     assert cb.call(lambda x: x + 1, 1) == 2
     assert cb.state == "closed"
 
 
-def test_opens_after_threshold_failures() -> None:
+def test_opens_after_threshold_failures(breaker_clock: list[float]) -> None:
     cb = CircuitBreaker(failure_threshold=2, recovery_timeout=0.1)
 
     def boom() -> None:
@@ -38,23 +48,23 @@ def _raise_value_error(msg: str = "v") -> None:
     raise ValueError(msg)
 
 
-def test_half_open_allows_probe_and_closes_on_success() -> None:
+def test_half_open_allows_probe_and_closes_on_success(breaker_clock: list[float]) -> None:
     cb = CircuitBreaker(failure_threshold=1, recovery_timeout=0.05)
     with pytest.raises(ConnectionError):
         cb.call(_raise_connection_error)
     assert cb.state == "open"
 
-    time.sleep(0.08)
+    breaker_clock[0] += 0.08
     assert cb.state == "half_open"
     assert cb.call(lambda: "ok") == "ok"
     assert cb.state == "closed"
 
 
-def test_half_open_failure_reopens() -> None:
+def test_half_open_failure_reopens(breaker_clock: list[float]) -> None:
     cb = CircuitBreaker(failure_threshold=1, recovery_timeout=0.05)
     with pytest.raises(ConnectionError):
         cb.call(_raise_connection_error)
-    time.sleep(0.08)
+    breaker_clock[0] += 0.08
     assert cb.state == "half_open"
     with pytest.raises(ConnectionError):
         cb.call(_raise_connection_error, "y")

From 013961ace50ab5924c5f8b452883c9afd1d3437b Mon Sep 17 00:00:00 2001
From: JeffreyChen <zenxcvwait@gmail.com>
Date: Sun, 11 Oct 2026 15:46:26 +0800
Subject: [PATCH 8/9] Record full pull request validation results

---
 docs/updates/2026-10.md | 2 +-
 progress.md             | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/docs/updates/2026-10.md b/docs/updates/2026-10.md
index adbce40..607f575 100644
--- a/docs/updates/2026-10.md
+++ b/docs/updates/2026-10.md
@@ -749,5 +749,5 @@ Index and query commands: [README.md](README.md). New entries go at the end.
 
 - **What**: integrate the dependency updates, the legacy CLI failure exit status (#108), and the roadmap (#107) into the storage implementation branch (#109). Resolve adjacent dependency edits without losing either minimum version, retain the CLI and storage documentation in all three languages, and give the CLI update log its own ID (`U-20261008-39`).
 - **CI finding**: main run 38042168722 failed `test_opens_after_threshold_failures` after the 0.1-second recovery timeout elapsed before the assertion. Replace wall-clock timing with a controlled monotonic clock in the threshold and recovery tests; production behavior is unchanged.
-- **Validation**: 52 CLI/executor tests, 43 dependency-related tests against the five updated package versions, and eight circuit breaker tests pass locally. Ruff lint/format and mypy checks pass. New GitHub Actions runs were queued during review; the original PR checks passed.
+- **Validation**: The full Windows/Python 3.11 suite passes (5776 passed, 257 skipped); the updated circuit breaker tests separately pass all eight cases. Also verified 52 CLI/executor tests, 43 dependency-related tests against the five updated package versions, and 32 metadata/release tests after synchronizing main versions. Ruff lint/format and mypy checks pass. New GitHub Actions runs were queued during review; the original PR checks passed.
 - **Files**: `tests/test_circuit_breaker.py`, the merged CLI code and documentation, dependency requirement files, and the update-log index.
diff --git a/progress.md b/progress.md
index eb580cf..9049408 100644
--- a/progress.md
+++ b/progress.md
@@ -31,4 +31,3 @@ Items #10 to #26 are what is left of the 1.0 roadmap (`docs/FILEAUTOMATION-1.0-R
 - **#34** [BLOCKED] PyPI Trusted Publishing (roadmap §13). `publish.yml` and `publish-dev` still upload with the `PYPI_API_TOKEN` secret. Switching needs the owner to add a trusted publisher for each project on PyPI (`automation_file`: workflow `publish.yml`; `automation_file_dev`: workflow `ci-dev.yml`; an environment name if one is wanted) before the workflows can drop the token for `id-token: write` and `pypa/gh-action-pypi-publish`. Changing the workflows first would break both channels.
 
 ### Packaging follow-ups
-

From 002e08df6250183b762b329432ca54eb4821c774 Mon Sep 17 00:00:00 2001
From: JeffreyChen <zenxcvwait@gmail.com>
Date: Sun, 11 Oct 2026 17:33:30 +0800
Subject: [PATCH 9/9] Fix circuit breaker fixture naming and unused arguments

---
 docs/updates/2026-10.md       | 5 +++++
 docs/updates/README.md        | 3 ++-
 tests/test_circuit_breaker.py | 7 ++++---
 3 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/docs/updates/2026-10.md b/docs/updates/2026-10.md
index 607f575..a59a9cb 100644
--- a/docs/updates/2026-10.md
+++ b/docs/updates/2026-10.md
@@ -751,3 +751,8 @@ Index and query commands: [README.md](README.md). New entries go at the end.
 - **CI finding**: main run 38042168722 failed `test_opens_after_threshold_failures` after the 0.1-second recovery timeout elapsed before the assertion. Replace wall-clock timing with a controlled monotonic clock in the threshold and recovery tests; production behavior is unchanged.
 - **Validation**: The full Windows/Python 3.11 suite passes (5776 passed, 257 skipped); the updated circuit breaker tests separately pass all eight cases. Also verified 52 CLI/executor tests, 43 dependency-related tests against the five updated package versions, and 32 metadata/release tests after synchronizing main versions. Ruff lint/format and mypy checks pass. New GitHub Actions runs were queued during review; the original PR checks passed.
 - **Files**: `tests/test_circuit_breaker.py`, the merged CLI code and documentation, dependency requirement files, and the update-log index.
+
+
+## U-20261011-02 · 2026-10-11 · Keep circuit breaker clock fixtures lint clean · #done #ci
+
+Name the clock fixture explicitly and request its side effect through usefixtures where no clock value is used. All eight circuit breaker regression tests pass.
diff --git a/docs/updates/README.md b/docs/updates/README.md
index 34cffae..302e9af 100644
--- a/docs/updates/README.md
+++ b/docs/updates/README.md
@@ -58,6 +58,7 @@ In the same commit: delete the item from `progress.md`, add a `#done` entry here
 
 | ID | Date | Title | Tags | Batch |
 |---|---|---|---|---|
+| U-20261011-02 | 2026-10-11 | Keep circuit breaker clock fixtures lint clean | #done #ci | [2026-10](2026-10.md) |
 | U-20261011-01 | 2026-10-11 | Integrate open pull requests and stabilize circuit breaker tests | #ci #tests #dependencies | [2026-10](2026-10.md) |
 | U-20261008-39 | 2026-10-08 | The legacy CLI flags exit 1 when an action failed | #feature #cli #testpioneer | [2026-10](2026-10.md) |
 | U-20261008-38 | 2026-10-08 | Integrate the PyBreeze all-extras dependency before stable release | #done #dependencies | [2026-10](2026-10.md) |
@@ -135,5 +136,5 @@ In the same commit: delete the item from `progress.md`, add a `#done` entry here
 
 | File | Period | Entries |
 |---|---|---:|
-| [2026-10.md](2026-10.md) | 2026-10 | 51 |
+| [2026-10.md](2026-10.md) | 2026-10 | 52 |
 | [2026-09.md](2026-09.md) | 2026-09 | 21 |
diff --git a/tests/test_circuit_breaker.py b/tests/test_circuit_breaker.py
index 5de1fce..f377742 100644
--- a/tests/test_circuit_breaker.py
+++ b/tests/test_circuit_breaker.py
@@ -10,8 +10,8 @@
 from automation_file.exceptions import CircuitOpenException
 
 
-@pytest.fixture
-def breaker_clock(monkeypatch: pytest.MonkeyPatch) -> list[float]:
+@pytest.fixture(name="breaker_clock")
+def _breaker_clock(monkeypatch: pytest.MonkeyPatch) -> list[float]:
     clock = [100.0]
     monkeypatch.setattr(
         "automation_file.core.circuit_breaker.time",
@@ -26,7 +26,8 @@ def test_closed_passes_through() -> None:
     assert cb.state == "closed"
 
 
-def test_opens_after_threshold_failures(breaker_clock: list[float]) -> None:
+@pytest.mark.usefixtures("breaker_clock")
+def test_opens_after_threshold_failures() -> None:
     cb = CircuitBreaker(failure_threshold=2, recovery_timeout=0.1)
 
     def boom() -> None: