This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+3 more
Summary
AI summaryPASS verdict banner now visible for configured policies and calls-per-month input no longer silently overrides YAML settings.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
PASS verdict now renders a visible banner on configured-policy projects. PASS verdict now renders a visible banner on configured-policy projects. Source: llm_adapter@2026-05-30 Confidence: high |
— |
| Bugfix | Medium |
'calls-per-month' action input no longer silently overrides .tokentoll.yml setting. 'calls-per-month' action input no longer silently overrides .tokentoll.yml setting. Source: llm_adapter@2026-05-30 Confidence: high |
— |
Full changelog
Two small fixes surfaced while building the live demo repo.
Fixes
PASS verdict is now visible on configured-policy projects
Previously the PASS verdict was silent: a PR that satisfied every budget got a quiet cost-diff comment with no indication the policy gate had even run. That looked the same as a project with no policy at all.
Now: when .tokentoll.yml has a policy block, PASS renders a verdict banner with a positive subtitle:
## tokentoll verdict: PASS
All configured budgets and rules were satisfied.
---
When no policy is configured, the comment stays neutral (no banner). FAIL behavior is unchanged.
calls-per-month action input no longer silently overrides .tokentoll.yml
The action's input previously defaulted to \"1000\", which always overrode the calls_per_month setting in .tokentoll.yml. Workflows that set the value explicitly were fine; workflows that relied on the YAML for traffic assumptions were quietly using 1000 instead.
Now the default is empty and the CLI flag is only passed when the input is non-empty. Workflows that explicitly set calls-per-month keep working unchanged.
Tests
145 passing (was 141). Four new tests cover the verdict-rendering paths.
Upgrade
pip install --upgrade tokentoll
- uses: Jwrede/[email protected]
No schema or CLI changes.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Tokentoll
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]