 Vincent Koc
|
fa86caf94f
|
fix(release): keep protected tooling trusted after main moves (#126881)
* fix(release): keep protected tooling trusted after main moves
* fix(release): cover protected tooling recovery paths
* fix(release): honor live tooling contracts
* fix(release): revalidate tooling at npm publish
* fix(release): bind npm publishers to live tooling
* fix(release): preserve trusted dispatch identity
* fix(release): revalidate parent authorization
* fix(release): bind ClawHub to release parent
* docs(release): define frozen tooling identity
* test(release): align ClawHub protected dispatch ref
* fix(release): trust protected plugin npm preflight tooling
* docs(release): scope protected writer guarantees
* fix(release): keep protected tooling foundation npm-only
* test(release): cover trusted npm preflight tooling
|
2026-08-21 07:24:31 +00:00 |
|
|
Peter Steinberger
|
c70aee247e
|
refactor(scripts): migrate JavaScript tools to TypeScript (#121005)
* refactor(scripts): migrate JavaScript tools to TypeScript
* fix(ci): keep changed-scope preflight zero-install
* fix(ci): preserve zero-install script owners
* fix(ci): complete script migration follow-through
* fix(release): keep stable closeout zero-install
* fix(scripts): preserve standalone execution boundaries
* fix(scripts): repair standalone loader boundaries
* fix(scripts): normalize gateway observation ids
* fix(scripts): keep Docker packager standalone
* test(scripts): preserve rebase cleanup helpers
* test(sessions): use tracked temp directory
|
2026-08-09 07:21:35 -07:00 |
|
|
Vincent Koc
|
6a0eecdb44
|
fix(release): separate code and release SHA validation (#105948)
|
2026-07-13 13:38:19 +08:00 |
|
|
Vincent Koc
|
c47ceb0f3d
|
improve(release): reuse exact-SHA validation evidence (#104162)
* perf(release): share changelog verification snapshots
* perf(release): reuse exact-SHA validation evidence
* feat(release): checkpoint candidate workflow state
* feat(release): watch CI transitions compactly
* fix(testbox): rotate stale reusable leases
* refactor(release): move CI verifier into scripts
* fix(release): preserve verifier executable mode
* fix(testbox): force noninteractive remote hydration
* perf(testbox): skip sync for proven clean heads
* fix(testbox): keep changed gates synchronized
* fix(testbox): isolate git state probes
* fix(testbox): isolate wrapper git commands
* fix(testbox): preserve git command contracts
* fix(release): validate reused SHA evidence
* fix(release): resume serialized plugin selections
* fix(testbox): sync source on every lease reuse
* fix(release): verify from trusted workflow checkout
* fix(release): gate evidence reuse on trusted lineage
* fix(release): support legacy verifier checkouts
* fix(testbox): export CI across shell snippets
* fix(release): revalidate reused evidence before publish
* fix(release): reject untrusted reuse before lookup
* fix(release): reuse SHA-pinned root evidence
* fix(ci): allow unreleased notes in QA packages
* fix(release): satisfy script lint contracts
* fix(release): handle Unicode workflow refs safely
|
2026-07-11 12:48:27 +08:00 |
|
|
Peter Steinberger
|
fece8c9f54
|
fix(release): keep validation evidence immutable across reruns (#103906)
* fix(release): bind validation evidence to exact attempts
* test(release): cover exact validation attempts
|
2026-07-10 20:16:19 +01:00 |
|