c70aee247e
refactor(scripts): migrate JavaScript tools to TypeScript ( #121005 )
...
* refactor(scripts): migrate JavaScript tools to TypeScript
* fix(ci): keep changed-scope preflight zero-install
* fix(ci): preserve zero-install script owners
* fix(ci): complete script migration follow-through
* fix(release): keep stable closeout zero-install
* fix(scripts): preserve standalone execution boundaries
* fix(scripts): repair standalone loader boundaries
* fix(scripts): normalize gateway observation ids
* fix(scripts): keep Docker packager standalone
* test(scripts): preserve rebase cleanup helpers
* test(sessions): use tracked temp directory
2026-08-09 07:21:35 -07:00
1564c0719f
ci: pin exact action version comments ( #113386 )
2026-07-24 12:05:51 -07:00
ced50f88e9
fix(ci): allow detached release children after parent success
2026-07-17 09:48:38 +01:00
0f7fbfa003
fix(release): bind bootstrap publish workflow identity
2026-07-15 17:41:54 +01:00
54f70c5d8c
fix(release): unblock plugin bootstrap recovery ( #108243 )
2026-07-15 03:34:08 -07:00
bb1a7e5069
fix(release): pin publish workflows to protected tags
2026-07-15 09:52:01 +01:00
54cc90b1b1
fix(release): publish ClawHub bootstrap artifacts immutably ( #103809 )
...
* fix(release): harden ClawHub bootstrap
* fix(release): centralize publication artifact verification
* fix(release): harden publication artifact verification
* fix(release): lock ClawHub bootstrap toolchain
* test(release): assert locked ClawHub binary
* fix(release): pack with trusted ClawHub harness
* fix(release): bound beta verifier artifact reads
* fix(release): bind target and tooling identities
* fix(release): stabilize signed package ordering
* fix(release): bind ClawHub pretag proof
* fix(release): bind ClawHub OIDC readback
* fix(release): bind ClawHub OIDC readback
2026-07-10 13:33:20 -07:00
5e0652f284
fix: bump ClawHub publish CLI pin ( #98233 )
2026-06-30 11:26:51 -07:00
abb6f04e0c
ci(release): harden release controls
...
One-time maintainer-authorized bootstrap merge for the release-gate verifier policy. Exact hosted CI and all supporting workflow gates passed on 66133de419
2026-06-18 03:11:20 +08:00
6cf06e8e7e
ci: split plugin ClawHub publishing paths
...
* feat: partition clawhub plugin release candidates
* fix: read clawhub trusted publisher config endpoint
* feat: split clawhub plugin bootstrap workflow
* ci: split plugin clawhub publish paths
* ci: pin clawhub package publish workflow
* ci: keep clawhub bootstrap token out of builds
* ci: fix clawhub release dry-run gating
* ci: align clawhub oidc publish refs
* ci: make clawhub bootstrap recovery idempotent
* ci: route clawhub repair candidates through bootstrap
* ci: preserve tideclaw alpha clawhub guards
* ci: simplify clawhub release ref handling
* ci: extract clawhub release routing plan
* ci: extract clawhub release runtime state
* test: guard clawhub release helper executability
* ci: pin ClawHub CLI for plugin publishing
* ci: allow historical ClawHub dry-run validation
* ci: fix ClawHub bootstrap token handoff
2026-06-12 20:16:06 -07:00
Peter Steinberger