ce0fafefce
fix(tooling): avoid build and test startup stalls on shared tsx caches ( #130924 )
...
* fix(tooling): avoid shared tsx cache startup stalls
Use the shared preloader before tsx initializes so maintained build, check, and test commands retain memory transforms without scanning other checkouts' disk caches. Preserve changed-cwd forks and copied tooling closures.
* test: align command contracts with tooling bootstrap
2026-08-27 10:36:12 -07:00
8cf6b9e5ab
fix(scripts): resolve worktree implementation dependencies ( #130950 )
...
* fix(scripts): resolve worktree implementation dependencies
* test(scripts): complete bootstrap fixture and trust closures
2026-08-27 07:32:07 -07:00
234df15a6d
chore: refresh dependencies after seven-day cooldown ( #128414 )
...
* build(deps): refresh dependencies after cooldown
Apply dependency, toolchain, action, image, and exact tool updates released by the inclusive 2026-08-16 seven-day cutoff. Adapt owner boundaries for the resulting CUA, logging, Teams, Markdown, native, and test-harness contract changes while retaining versions blocked by upstream compatibility constraints.
* fix(ui): align markdown renderer env typing
* fix(deps): align postcss and mistral peer contracts
* fix(deps): repair refreshed dependency contracts
* fix(deps): retain tslog startup budget
* fix(ci): verify Android tools with SHA-256
* fix(ci): fence Android SDK cache version
2026-08-24 03:01:54 -07:00
1da74794b6
fix(release): establish immutable release plan contract ( #127008 )
...
* fix(release): define immutable release plan contract
* fix(release): harden immutable plan authority
* fix(release): tighten release plan authority
* fix(release): share plugin publication authority
* fix(release): verify plan authority remotely
* fix(release): track ClawHub publication authorities
* fix(release): trust remote tooling tag identity
* fix(release): close plugin publication authority
* fix(release): align npm authority selection
* fix(release): bind plans to validation intent
* fix(release): require qualification cadence
* fix(release): reject lossy canonical values
* fix(release): narrow qualification cadence
* fix(release): bind plan parser dependency
* fix(release): add tagless diagnostic plans
* fix(release): attest release plan parser tree
* fix(release): isolate verified plan parser snapshot
* fix(release): verify plan tooling before execution
2026-08-21 11:24:22 -07:00
225aa5a178
fix(ci): isolate Actions cache writes ( #127107 )
2026-08-21 02:45:06 -07:00
fa86caf94f
fix(release): keep protected tooling trusted after main moves ( #126881 )
...
* fix(release): keep protected tooling trusted after main moves
* fix(release): cover protected tooling recovery paths
* fix(release): honor live tooling contracts
* fix(release): revalidate tooling at npm publish
* fix(release): bind npm publishers to live tooling
* fix(release): preserve trusted dispatch identity
* fix(release): revalidate parent authorization
* fix(release): bind ClawHub to release parent
* docs(release): define frozen tooling identity
* test(release): align ClawHub protected dispatch ref
* fix(release): trust protected plugin npm preflight tooling
* docs(release): scope protected writer guarantees
* fix(release): keep protected tooling foundation npm-only
* test(release): cover trusted npm preflight tooling
2026-08-21 07:24:31 +00:00
2c0de878c6
fix(release): preflight plugin npm trusted publishers ( #124095 )
...
* fix(release): preflight npm trusted publishers
* fix(release): fully escape npm package path
2026-08-15 01:05:54 -07:00
03e89dc9d5
fix(release): include plugin tooling dependencies ( #123082 )
2026-08-13 17:22:11 +08:00
0f6885141b
fix(ci): use Node 24.16 for release workflows ( #121967 )
2026-08-11 17:11:35 +08:00
c6b9be2646
fix(release): run plugin tooling against source checkout ( #121762 )
2026-08-10 16:16:33 -07:00
c70aee247e
refactor(scripts): migrate JavaScript tools to TypeScript ( #121005 )
...
* refactor(scripts): migrate JavaScript tools to TypeScript
* fix(ci): keep changed-scope preflight zero-install
* fix(ci): preserve zero-install script owners
* fix(ci): complete script migration follow-through
* fix(release): keep stable closeout zero-install
* fix(scripts): preserve standalone execution boundaries
* fix(scripts): repair standalone loader boundaries
* fix(scripts): normalize gateway observation ids
* fix(scripts): keep Docker packager standalone
* test(scripts): preserve rebase cleanup helpers
* test(sessions): use tracked temp directory
2026-08-09 07:21:35 -07:00
7866ecae4b
fix(release): keep npm 12 pack checks working ( #118209 )
...
* fix(release): accept npm 12 pack json
* fix(release): share npm pack normalizer in plugin workflow
2026-08-02 14:57:49 -07:00
9bc3c29555
fix(release): overlay plugin lock generator ( #117677 )
2026-08-02 08:58:55 +08:00
7280844973
fix(release): use pinned plugin packaging tooling ( #117645 )
...
* fix(release): use pinned plugin packaging tooling
* fix(release): keep OIDC setup trusted
2026-08-02 06:14:36 +08:00
1564c0719f
ci: pin exact action version comments ( #113386 )
2026-07-24 12:05:51 -07:00
74cc99f2d1
fix(release): publish extended-stable Docker channels safely ( #112494 )
...
* fix(release): isolate extended-stable Docker aliases
* fix(release): harden Docker channel promotion
* docs(release): pin Docker policy into tagged tree
* refactor(release): isolate Docker channel promotion
* fix(release): queue Docker publications
* fix(release): harden docker channel promotion
* docs(release): tighten extended-stable guidance
* fix(release): promote Docker aliases after verification
* chore(release): format maintainer instructions
* refactor(release): separate release version policy
* docs(release): clarify extended-stable gateway scope
* fix(release): harden Docker channel promotion
2026-07-23 10:03:11 +09:00
e8734d837e
fix(ci): bound plugin-npm-release git fetch and npm publish with timeout ( #110279 )
...
* fix(ci): bound plugin-npm-release git fetch and npm publish with timeout
* fix(ci): bound plugin-npm-release git fetch and npm publish with timeout
ci: retrigger checks
* test(ci): guard plugin release timeouts
Co-authored-by: wanyongstar <wan.yong@xydigit.com >
* docs(ci): explain npm timeout recovery
Co-authored-by: wanyongstar <wan.yong@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-18 06:06:12 +01:00
cb70d7104e
ci: speed up release preparation
2026-07-17 13:43:12 +01:00
d8dd59bf8f
fix(ci): make npm bootstrap retries idempotent
2026-07-17 06:54:52 +01:00
9c61809ec4
fix(ci): bound plugin npm artifact connection ( #108897 )
2026-07-16 11:23:01 -07:00
54f70c5d8c
fix(release): unblock plugin bootstrap recovery ( #108243 )
2026-07-15 03:34:08 -07:00
dfa246e6fd
fix(release): complete protected publish tooling
2026-07-15 10:43:00 +01:00
13212f1a4d
fix(release): accept canonical plugin package identities ( #105746 )
2026-07-13 07:45:31 +08:00
022dd9dc27
fix(release): unblock Meta npm bootstrap publication ( #103951 )
...
* fix(release): isolate Meta npm bootstrap
* test(release): assert OIDC npm version guard
2026-07-10 14:50:00 -07:00
daa653c5cc
ci(release): add plugin npm artifact preflight ( #103759 )
...
* ci(release): add plugin npm preflight proof
* fix(release): bind plugin preflight package evidence
* fix(release): harden plugin preflight trust
* fix(release): bind plugin registry readback
* fix(release): retry npm packument bodies
* fix(release): retry malformed npm packuments
* fix(release): satisfy npm preflight lint
2026-07-10 09:39:10 -07:00
9d2d517296
feat: publish plugins with extended-stable releases ( #100448 )
...
* feat(release): publish plugins on extended-stable
* feat(plugins): align extended-stable with core
* docs: explain extended-stable plugin alignment
* fix(release): make plugin convergence recoverable
* fix(plugins): preserve extended-stable fallback intent
* fix(release): keep plugin tag mutation credential-isolated
2026-07-05 16:16:26 -07:00
e03f12ef3b
ci(release): restore plugin npm token env
...
(cherry picked from commit 9c154ffa46
2026-06-30 15:54:11 -07:00
ccb515fa69
ci(release): restore trusted plugin npm publishing
...
(cherry picked from commit 866fc34e30
2026-06-30 15:54:11 -07:00
4355e719b8
ci(release): allow token plugin npm recovery
...
(cherry picked from commit faa99eeb63
2026-06-30 15:54:11 -07:00
5cf8ba973d
fix(ci): cancel superseded main workflows
2026-06-20 17:42:47 +08:00
abb6f04e0c
ci(release): harden release controls
...
One-time maintainer-authorized bootstrap merge for the release-gate verifier policy. Exact hosted CI and all supporting workflow gates passed on 66133de419
2026-06-18 03:11:20 +08:00
3b78d41a9e
fix(release): use trusted publishing for plugin npm
2026-06-12 12:07:32 +08:00
427df01d4e
ci(release): checkout approval helper
2026-05-30 21:13:19 +01:00
50b7a2ffa1
ci(release): allow direct publish recovery
2026-05-30 21:13:19 +01:00
239523668e
ci(release): make plugin publish retries idempotent
2026-05-29 15:18:18 +01:00
a0702e195d
build(pnpm): use packageManager as pnpm source
...
Recreated from #85108 because the original branch could not be updated by maintainers.
Preserves current-main pnpm install hardening while switching workflow pnpm setup to packageManager, and adds exact version-scoped release-age exclusions for already-locked packages that pnpm 11.2.2 audits during install.
Co-authored-by: Altay <altay@hey.com >
2026-05-22 19:17:43 +01:00
0604d25101
ci(release): preserve direct repair publishes
2026-05-21 07:58:15 +01:00
1c5fda115f
ci(release): streamline beta publish verification
2026-05-21 07:58:15 +01:00
451563b950
ci: allow Tideclaw alpha release workflows
2026-05-17 07:00:53 +01:00
8b95270cc9
ci(pnpm): use pnpm 11 in workflows
2026-05-11 00:48:14 +01:00
18997be120
ci: speed up release validation reruns
2026-05-11 00:22:19 +01:00
eb5517be51
fix(release): verify published plugin runtime tarballs
2026-05-03 10:22:36 -07:00
0dafc37e57
ci: use npm token for plugin publishes
2026-05-02 21:37:00 +01:00
cdd8e81075
ci: orchestrate plugin release publishing
2026-05-02 07:24:02 +01:00
3800e49aa5
ci: prefer trusted publishing for plugin releases
2026-05-02 03:16:03 +01:00
d5c8d70f02
ci: install deps before plugin npm publish preview
2026-05-02 03:06:33 +01:00
d8c3e9ed6d
ci: stage generated plugin manifests for npm publish
2026-05-02 01:25:54 +01:00
5ac6d7661c
fix(ci): harden workflow checkouts
2026-04-28 01:37:00 -07:00
c07b388f77
ci: keep pnpm alignment scoped to CI
2026-04-22 05:58:50 +01:00
fbddef34bd
perf(ci): trim provider catalog test setup
2026-04-22 05:57:22 +01:00
Peter Steinberger