ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-26 04:15:48 -06:00
Code Issues Packages Projects Releases Wiki Activity
82,396 Commits 4,454 Branches 373 Tags
security/codeql-proxy-digest-20260821
Commit Graph

27 Commits

Author SHA1 Message Date
Peter Steinberger 72b06b0077 fix(release): keep polling before decision artifacts exist (#129166) 
Handle GitHub's current missing-artifact message without abandoning active full validation, while preserving early blocker decisions. Covers #129104.
 2026-08-25 01:55:19 -07:00
Vincent Koc a2f0b84e8a fix(release): report blockers before diagnostics finish (#127014) 
* fix(release): separate decisions from diagnostic drain

* test(release): align decision drain fixtures

* fix(release): pin artifact downloads to valid v8 SHA

* fix(release): default empty evidence paths in plans

* fix(release): bind complete evidence reuse selection

* fix(release): harden retry artifact integrity

* fix(release): canonicalize reused validation evidence

* fix(release): bind manifest children to execution plan

* test(release): fix validation fixture types

* fix(release): retry transient decision artifact reads
 2026-08-21 09:14:39 -07:00
Vincent Koc fa86caf94f fix(release): keep protected tooling trusted after main moves (#126881) 
* fix(release): keep protected tooling trusted after main moves

* fix(release): cover protected tooling recovery paths

* fix(release): honor live tooling contracts

* fix(release): revalidate tooling at npm publish

* fix(release): bind npm publishers to live tooling

* fix(release): preserve trusted dispatch identity

* fix(release): revalidate parent authorization

* fix(release): bind ClawHub to release parent

* docs(release): define frozen tooling identity

* test(release): align ClawHub protected dispatch ref

* fix(release): trust protected plugin npm preflight tooling

* docs(release): scope protected writer guarantees

* fix(release): keep protected tooling foundation npm-only

* test(release): cover trusted npm preflight tooling
 2026-08-21 07:24:31 +00:00
Vincent Koc 750f2f3762 fix(release): require concrete validation retry groups (#127012) 
* fix(release): require concrete validation retry groups

* fix(release): reject mismatched retry filters

* fix(release): align retry controller vocabulary

* fix(release): preserve historical validation evidence

* fix(release): validate retry filters before scheduling

* test(release): follow shared filter validator

* docs(testing): clarify release QA retry groups
 2026-08-20 23:35:16 -07:00
Peter Steinberger e1051ceea3 fix(release): dispatch validation by full SHA (#126669) 2026-08-20 06:01:09 -07:00
Vincent Koc c28c279afa fix(release): keep frozen validation independent of main (#126622) 
* fix(release): freeze validation tooling identity

* fix(release): enforce frozen validation contract

* fix(release): validate candidate identity in parent

* fix(ci): close release isolation gate findings
 2026-08-20 04:32:38 -07:00
Peter Steinberger b3248bf8f1 fix(release): authenticate performance health probes (#125453) 2026-08-17 16:54:21 -07:00
Peter Steinberger ab5b8b9a02 refactor(test): prove release validation through its harness (#124245) 
* refactor(test): move release validation proof to harness

* test(release): assert dispatch input pairs
 2026-08-15 12:14:33 -07:00
Vincent Koc 1f591bba56 fix(release): bound validation retries and soak 2026-08-10 22:31:32 +08:00
Peter Steinberger c70aee247e refactor(scripts): migrate JavaScript tools to TypeScript (#121005) 
* refactor(scripts): migrate JavaScript tools to TypeScript

* fix(ci): keep changed-scope preflight zero-install

* fix(ci): preserve zero-install script owners

* fix(ci): complete script migration follow-through

* fix(release): keep stable closeout zero-install

* fix(scripts): preserve standalone execution boundaries

* fix(scripts): repair standalone loader boundaries

* fix(scripts): normalize gateway observation ids

* fix(scripts): keep Docker packager standalone

* test(scripts): preserve rebase cleanup helpers

* test(sessions): use tracked temp directory
 2026-08-09 07:21:35 -07:00
Peter Steinberger 18dd70cec0 fix(release): dispatch validation through a client-pushed target ref (#120613) 2026-08-08 08:22:17 -07:00
Peter Steinberger ea2c6a63c9 refactor(scripts): adopt shared scaffolding (#118514) 
* refactor(scripts): adopt shared scaffolding

* fix(scripts): satisfy strict tooling checks

* fix(scripts): preserve scaffolding contracts
 2026-08-03 04:40:30 -07:00
Vincent Koc e75ae0c9a9 fix(release): fail fast on invalid validation state (#118021) 2026-08-02 23:32:30 +08:00
Dallin Romney bf8da2537c improve(ci): fail_fast option for release validation, off by default (#116352) 
* ci: make release validation fail-fast optional

* ci: pass release QA fail-fast as boolean

* test: format release validation helper test
 2026-07-30 18:53:41 +08:00
Peter Steinberger 3c67fcc45d fix(release): stabilize beta validation and completion (#114396) 
* test(release): fix rebased validation gates

* test(migrate-hermes): use canonical auth store fixture

* test(secrets): reset runtime state before migration isolation

* test(secrets): reload singleton graph for migration isolation

* test(secrets): isolate auth migration state

* fix(release): return completed validation run

* docs: refresh docs map after forward-port
 2026-07-27 03:42:00 -04:00
Dallin Romney 354c6db731 fix(release): retain workflow ref after failed validation (#114104) 2026-07-26 06:13:26 -07:00
Peter Steinberger 57ae43a89c fix(ci): harden full release validation 2026-07-16 10:26:29 +01:00
Peter Steinberger 60f0a83db0 fix(ci): repair full release validation dispatch (#107728) 
* fix(ci): accept documented release validation extras

* fix(ci): pass main changelog policy to release checks
 2026-07-14 12:34:47 -07:00
Peter Steinberger c2e0ce7b68 fix(ci): restore main validation gates (#107697) 
* fix(ci): allow Unreleased notes for main validation

* test(ci): cover release smoke changelog intent

* test(ci): require release changelog policy propagation

* docs(agents): require review init after pushes

* chore(ci): prune stale max-lines baseline

* refactor(system-agent): split operation modules

* refactor(bonjour): keep ciao classification type private

* fix(bonjour): remove stale local classification alias
 2026-07-14 12:11:25 -07:00
Peter Steinberger 8a66398b2b fix(release): harden validation orchestration (#106873) 
* fix(release): harden validation orchestration

* fix(ci): repair release gate regressions

* docs(agents): record PR review guard mode

* test(ci): stabilize release gate coverage

* refactor(agents): remove session factory test export
 2026-07-13 17:53:10 -07:00
Vincent Koc 6a0eecdb44 fix(release): separate code and release SHA validation (#105948) 2026-07-13 13:38:19 +08:00
Peter Steinberger dbdc61e897 fix(ci): validate frozen release candidates safely (#104697) 
* fix(ci): validate frozen release candidates safely

* test(ci): align release workflow types

* fix(ci): validate frozen release tags safely
 2026-07-11 14:10:41 -07:00
Vincent Koc c47ceb0f3d improve(release): reuse exact-SHA validation evidence (#104162) 
* perf(release): share changelog verification snapshots

* perf(release): reuse exact-SHA validation evidence

* feat(release): checkpoint candidate workflow state

* feat(release): watch CI transitions compactly

* fix(testbox): rotate stale reusable leases

* refactor(release): move CI verifier into scripts

* fix(release): preserve verifier executable mode

* fix(testbox): force noninteractive remote hydration

* perf(testbox): skip sync for proven clean heads

* fix(testbox): keep changed gates synchronized

* fix(testbox): isolate git state probes

* fix(testbox): isolate wrapper git commands

* fix(testbox): preserve git command contracts

* fix(release): validate reused SHA evidence

* fix(release): resume serialized plugin selections

* fix(testbox): sync source on every lease reuse

* fix(release): verify from trusted workflow checkout

* fix(release): gate evidence reuse on trusted lineage

* fix(release): support legacy verifier checkouts

* fix(testbox): export CI across shell snippets

* fix(release): revalidate reused evidence before publish

* fix(release): reject untrusted reuse before lookup

* fix(release): reuse SHA-pinned root evidence

* fix(ci): allow unreleased notes in QA packages

* fix(release): satisfy script lint contracts

* fix(release): handle Unicode workflow refs safely
 2026-07-11 12:48:27 +08:00
Peter Steinberger fece8c9f54 fix(release): keep validation evidence immutable across reruns (#103906) 
* fix(release): bind validation evidence to exact attempts

* test(release): cover exact validation attempts
 2026-07-10 20:16:19 +01:00
Vincent Koc cbe3731f77 fix(release): make validation proof no-write (#103737) 
* fix(release): make validation proof no-write

* test(release): align no-write workflow contracts
 2026-07-10 08:18:44 -07:00
Vincent Koc bda05dbc2f fix(release): reject validation flag values 2026-06-21 20:05:22 +02:00
Vincent Koc bdc317f4a6 fix(release): require validation dispatch values 2026-06-06 22:39:58 +02:00