Skip to content

[docs] Update documentation for features from 2026-05-19#1409

Open
danielmeppiel wants to merge 1 commit into
mainfrom
docs/daily-update-2026-05-20-6b487a93c0dde737
Open

[docs] Update documentation for features from 2026-05-19#1409
danielmeppiel wants to merge 1 commit into
mainfrom
docs/daily-update-2026-05-20-6b487a93c0dde737

Conversation

@danielmeppiel
Copy link
Copy Markdown
Collaborator

Documentation Updates - 2026-05-19

This PR updates the documentation based on user-facing features merged in the last 24 hours.

Features Documented

Changes Made

  • Updated docs/src/content/docs/getting-started/installation.md to add a new troubleshooting
    section for when Windows Defender (or another AV) flags apm.exe as potentially unwanted
    software (HRESULTs 0x800700E1 / 0x800704EC). Covers three remediation paths and
    clarifies the distinction from the AppLocker/WDAC Access is denied block.

  • Updated docs/src/content/docs/consumer/private-and-org-packages.md to add a "Custom SSH user"
    subsection under the custom ports section, documenting that users can now specify a non-default
    SSH identity (e.g. EMU accounts like meppiel-microsoft) directly in (redacted) dependency URLs. Notes the ADO exception where git` is always used.

Merged PRs Referenced

Notes

Generated by Daily Documentation Updater · ● 728.3K ·

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/daily-doc-updater.md@b87234850bf9664d198f28a02df0f937d0447295
  • expires on May 22, 2026, 6:13 AM UTC

- installation.md: add troubleshooting section for Windows Defender /
  antivirus flagging apm.exe (HRESULTs 0x800700E1 and 0x800704EC).
  Covers three remediation options: Defender exclusion path, pip install,
  and false-positive submission. Clearly distinguishes this from the
  AppLocker/WDAC Access is denied block (0x80070005).

- private-and-org-packages.md: add 'Custom SSH user' subsection
  documenting the ability to specify a non-default SSH user in
  ssh:// dependency URLs (e.g. EMU accounts like meppiel-microsoft).
  Notes the ADO exception (always uses literal git user).

Triggered by merged PRs:
- #1408 fix(install): detect Windows Defender AV block and emit guidance
- #1385 fix(deps): honor SSH user from dependency URL

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings May 20, 2026 06:13
@danielmeppiel danielmeppiel added automation Deprecated: use type/automation. Kept for issue history; will be removed in milestone 0.10.0. documentation Deprecated: use type/docs. Kept for issue history; will be removed in milestone 0.10.0. labels May 20, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Starlight documentation to reflect two recently shipped user-facing behaviors: Windows antivirus block detection guidance during install/self-update, and support for custom SSH users in dependency URLs.

Changes:

  • Add a new Windows troubleshooting section for Defender/AV blocks of apm.exe, including remediation options and HRESULT distinctions.
  • Document how to specify a non-default SSH user in ssh:// dependency URLs, including validation rules and the Azure DevOps exception.
Show a summary per file
File Description
docs/src/content/docs/getting-started/installation.md Adds troubleshooting guidance for Windows Defender/antivirus blocks during the Testing binary... step.
docs/src/content/docs/consumer/private-and-org-packages.md Documents custom SSH user support in dependency URLs (and notes the ADO git-user exception).

Copilot's findings

  • Files reviewed: 2/2 changed files
  • Comments generated: 2

Comment on lines +264 to +273
Windows Defender (or another real-time antivirus) is blocking the unsigned PyInstaller binary. HRESULT `0x800700E1` and `0x800704EC` both indicate this class of block.

**Option 1 -- Add a Defender exclusion (elevated PowerShell):**

```powershell
# Run as administrator
Add-MpPreference -ExclusionPath "$env:LOCALAPPDATA\Programs\apm"
```

This tells Defender to skip scanning files under the APM install root. Re-run the installer after adding the exclusion.
Comment on lines +151 to +166
By default APM clones over SSH as `git`. To authenticate as a different
SSH identity -- for example, an EMU account or a custom service
account -- include the user directly in the `ssh://` URL:

```yaml
dependencies:
apm:
- git: ssh://meppiel-microsoft@github.com/acme/standards.git
ref: v1.2.0
- git: ssh://svc-account@bitbucket.acme.internal:7999/team/libs.git
ref: v1.2.0
```

The user portion is validated against a strict allowlist
(`[a-zA-Z0-9_][a-zA-Z0-9_.+-]*`, max 64 characters) before the SSH URL
is composed. Leading dashes and percent-encoded userinfo are rejected.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automation Deprecated: use type/automation. Kept for issue history; will be removed in milestone 0.10.0. documentation Deprecated: use type/docs. Kept for issue history; will be removed in milestone 0.10.0.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG] Hardcoded username when using SSH

2 participants