Commit Graph

3359 Commits

Author SHA1 Message Date
Dallin Romney dcc3ac8e2c test: stabilize oxlint shard cleanup (#117801) 2026-08-02 12:19:06 +08:00
Dallin Romney 564204b6b3 test(release): align Codex install fixture default 2026-07-31 18:59:33 +08:00
Dallin Romney 1706085db0 fix(qa): complete internal image generations (#116439)
* fix(qa): complete internal image generations

* test(scripts): stabilize timeout cleanup proof

* docs(release): consolidate Matrix QA ledger

* docs(release): remove Matrix image ledger entry

* docs(release): remove Matrix QA ledger entry

* docs(release): restore ledger spacing
2026-07-31 14:51:03 +08:00
Dallin Romney ec500af40a fix(release): isolate extended-stable Docker aliases (#112822)
* fix(release): isolate extended-stable Docker aliases

(cherry picked from commit db9915fedb)

# Conflicts:
#	.agents/skills/release-openclaw-maintainer/SKILL.md
#	.agents/skills/release-openclaw-maintainer/references/extended-stable-backports.md
#	.github/workflows/docker-release.yml
#	docs/docs_map.md
#	docs/install/docker.md
#	docs/reference/RELEASING.md

* fix(release): harden Docker channel promotion

(cherry picked from commit 505a6fe922)

* docs(release): pin Docker policy into tagged tree

(cherry picked from commit 3ff98457ba)

# Conflicts:
#	.agents/skills/release-openclaw-maintainer/SKILL.md
#	.agents/skills/release-openclaw-maintainer/references/extended-stable-backports.md
#	docs/reference/RELEASING.md

* refactor(release): isolate Docker channel promotion

(cherry picked from commit 3d02c5c821)

# Conflicts:
#	.agents/skills/release-openclaw-maintainer/SKILL.md
#	docs/reference/RELEASING.md

* fix(release): queue Docker publications

(cherry picked from commit b7cb1697ea)

* fix(release): harden docker channel promotion

(cherry picked from commit 7510aa52ce)

# Conflicts:
#	docs/reference/RELEASING.md
#	scripts/lib/npm-publish-plan.d.mts
#	scripts/lib/npm-publish-plan.mjs
#	scripts/openclaw-npm-postpublish-verify.ts

* fix(release): promote Docker aliases after verification

(cherry picked from commit a13cba1484)

# Conflicts:
#	.agents/skills/release-openclaw-maintainer/SKILL.md
#	docs/reference/RELEASING.md

* fix(release): harden Docker channel promotion

(cherry picked from commit ecc07ba7a3)

# Conflicts:
#	docs/ci.md
#	scripts/verify-docker-attestations.d.mts

* fix(release): adapt Docker promotion to maintenance policy helpers
2026-07-22 18:19:35 -07:00
Dallin Romney 7af0cfc9c5 fix(release): support frozen pre-AI extended-stable publish 2026-07-21 18:05:55 +09:00
Dallin Romney cc4fc8c78f test: tolerate stale mcp pairing approvals
Backports the release-harness fix from a472002384 while keeping the regression test independent of built dist output.
2026-07-18 14:46:14 -07:00
Dallin Romney c257894946 fix(release): scan SQLite installer transcripts (#110266)
(cherry picked from commit 66e15906b5)

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-07-17 17:43:09 -07:00
Dallin Romney 30bde936ef fix(release): carry the Z.AI API Platform waiver (#110243)
* test(ci): temporarily omit Z.AI API Platform validation (#109246)

* test(ci): temporarily omit Z.AI API Platform validation

* test(ci): align disabled provider count

(cherry picked from commit 954c77d4ef)

* fix(release): keep waived Z.AI probe out of broad shard

Adapt the Z.AI shard portion of upstream c4b2183db6 (#109272). Exclude the waived API Platform file from the broad agents shard while retaining the dedicated Coding Plan proof.

(cherry picked from commit c4b2183db6)
2026-07-17 16:48:48 -07:00
Dallin Romney e5a6f6daff fix(ci): pin v6.11 iOS formatter (#110232)
Adapt the iOS portion of upstream 265ca345a1 (#105242). Keep the generated Xcode lint phase on checksum-verified SwiftFormat 0.61.1 and point its Homebrew-first lookup at the verified binary.

(cherry picked from commit 265ca345a1)
2026-07-17 16:23:30 -07:00
Dallin Romney 427750041c fix(release): stabilize frozen validation tools (#110214)
* fix(ci): pin v6.11 SwiftFormat contract

Adapt the frozen-target SwiftFormat 0.61.1 pin and checksum from 7772d798dd and ce671c3513, with bounded download behavior from e0394c2ab4. Avoid formatting native sources or importing native runtime changes into the npm-only maintenance candidate.

* fix(release): load no-write images without attestations

Apply the validation-only Docker exporter fix from 69f8198ba3 (#103891): local --load exports cannot carry SBOM/provenance manifest lists. Registry-published images remain out of scope.
2026-07-17 16:08:44 -07:00
Dallin Romney 3341ade2bf fix(release): restore frozen validation startup (#110210)
* fix(release): restore frozen validation startup

Adapt the no-write validation portion of b597a8d364 (#103834) for the 6.x extended-stable workflow set. Remove validation-owned image publisher jobs instead of granting write permissions; Docker publication remains out of scope.

* fix(release): allow canonical extended-stable checks

Restore the openclaw-release-checks.yml portion of c7810fc697 (#99352) that authorizes the canonical extended-stable/YYYY.M.33 workflow branch.
2026-07-17 15:41:41 -07:00
Dallin Romney 9db92c67e8 fix(release): unblock 2026.6.33 validation (#107872)
Test-only repair for canonical extended-stable validation. Focused Testbox, path-scoped changed gates, changelog verification, and final branch autoreview passed.
2026-07-14 17:49:34 -07:00
Dallin Romney 6bcd4e0efe fix(release): route core to extended-stable
Adapt the closed publish-plan and tarball identity checks from upstream c7810fc697 for the v6.11 publisher.
2026-07-14 08:53:27 -07:00
Dallin Romney ad47bc72c7 fix(release): complete plugin npm preflight contract
Adapt the missing publish-tag and metadata-check portions of upstream 9d2d517296 and the pack-mode portion of 9eeebf7cb1.
2026-07-14 08:41:57 -07:00
Dallin Romney 403d47ab9f fix(release): require publish-grade validation evidence 2026-07-14 07:46:03 -07:00
Dallin Romney 355c4d9eb5 fix(release): preserve audited changelog metadata 2026-07-14 07:30:00 -07:00
Dallin Romney 9a87128cea fix(release): validate candidate installer evidence 2026-07-14 07:13:01 -07:00
Dallin Romney 718e31279c fix(release): complete exact-SHA validation contract 2026-07-14 07:01:03 -07:00
Dallin Romney a80ee54817 fix(release): bind validation evidence summary state 2026-07-14 06:47:38 -07:00
Dallin Romney 6146e4a5f6 test(release): scope plugin preflight to v6 inventory 2026-07-14 03:44:11 -07:00
Dallin Romney 452d217984 fix(release): validate npm-only evidence versions 2026-07-14 03:44:00 -07:00
Dallin Romney 7da3e6a55b test(release): restore package acceptance process helper 2026-07-14 03:43:50 -07:00
Dallin Romney 4588175df7 build(release): add release-note renderer prerequisite 2026-07-14 03:20:14 -07:00
Vincent Koc cf58ee42cc fix(release): accept canonical plugin package identities (#105746)
(cherry picked from commit 13212f1a4d)
2026-07-14 03:17:30 -07:00
Peter Steinberger c45dc961f5 fix(ci): validate frozen release candidates safely (#104697)
* fix(ci): validate frozen release candidates safely

* test(ci): align release workflow types

* fix(ci): validate frozen release tags safely

(cherry picked from commit dbdc61e897)
2026-07-14 03:17:16 -07:00
Vincent Koc 1281148184 improve(release): reuse exact-SHA validation evidence (#104162)
* perf(release): share changelog verification snapshots

* perf(release): reuse exact-SHA validation evidence

* feat(release): checkpoint candidate workflow state

* feat(release): watch CI transitions compactly

* fix(testbox): rotate stale reusable leases

* refactor(release): move CI verifier into scripts

* fix(release): preserve verifier executable mode

* fix(testbox): force noninteractive remote hydration

* perf(testbox): skip sync for proven clean heads

* fix(testbox): keep changed gates synchronized

* fix(testbox): isolate git state probes

* fix(testbox): isolate wrapper git commands

* fix(testbox): preserve git command contracts

* fix(release): validate reused SHA evidence

* fix(release): resume serialized plugin selections

* fix(testbox): sync source on every lease reuse

* fix(release): verify from trusted workflow checkout

* fix(release): gate evidence reuse on trusted lineage

* fix(release): support legacy verifier checkouts

* fix(testbox): export CI across shell snippets

* fix(release): revalidate reused evidence before publish

* fix(release): reject untrusted reuse before lookup

* fix(release): reuse SHA-pinned root evidence

* fix(ci): allow unreleased notes in QA packages

* fix(release): satisfy script lint contracts

* fix(release): handle Unicode workflow refs safely

(cherry picked from commit c47ceb0f3d)
2026-07-14 03:15:26 -07:00
Peter Steinberger 089fadb2f7 fix(release): keep validation evidence immutable across reruns (#103906)
* fix(release): bind validation evidence to exact attempts

* test(release): cover exact validation attempts

(cherry picked from commit fece8c9f54)
2026-07-14 03:12:05 -07:00
Vincent Koc 8dd6ce19c1 ci(release): add plugin npm artifact preflight (#103759)
* ci(release): add plugin npm preflight proof

* fix(release): bind plugin preflight package evidence

* fix(release): harden plugin preflight trust

* fix(release): bind plugin registry readback

* fix(release): retry npm packument bodies

* fix(release): retry malformed npm packuments

* fix(release): satisfy npm preflight lint

(cherry picked from commit daa653c5cc)
2026-07-14 03:08:07 -07:00
Vincent Koc e920880ca7 fix(release): make validation proof no-write (#103737)
* fix(release): make validation proof no-write

* test(release): align no-write workflow contracts

(cherry picked from commit cbe3731f77)
2026-07-14 03:06:41 -07:00
Peter Steinberger 5f598f3b71 ci: retry transient release workflow reads (#102896)
(cherry picked from commit aca96d2dcf)
2026-07-14 02:56:56 -07:00
Peter Steinberger 2d7c97028e ci: make release child dispatch idempotent (#102858)
(cherry picked from commit 11dda0e5fd)
2026-07-14 02:56:42 -07:00
Vincent Koc 5e02ed4048 fix(release): validate exact prepared npm package sets (#102759)
* fix(release): validate prepared npm package sets

Forward-port the beta3 package-set preflight, Telegram, and Parallels validation to main while preserving main's existing Bun install smoke. Recompute decoded proxy response lengths and require artifact tarballs to exactly match the verified manifest.

* fix(release): lock fixture registry proxy origin

(cherry picked from commit 0535679083)
2026-07-14 02:56:25 -07:00
Kevin Lin 93ca33704b feat(update): support extended-stable package updates (#99811)
* feat(update): add extended-stable channel contract

* feat(update): implement extended-stable package flow

* docs(update): document extended-stable behavior

* fix(update): preserve extended-stable preflight guarantees

* fix(update): reject extended-stable Git repair

* fix(update): support loopback extended-stable canaries

* fix(update): preserve scoped package roots

(cherry picked from commit d214622320)
2026-07-14 02:43:39 -07:00
Dallin Romney d21c485f00 fix(installer): use supported Node 22 patch
(cherry picked from commit de63d91e4b)
2026-07-14 02:42:58 -07:00
Dallin Romney eaeb408205 fix(release): validate Claude smoke response exactly
(cherry picked from commit 79189a2cb1)
2026-07-14 02:42:29 -07:00
Peter Steinberger 8ea7470508 fix(release): avoid token-shaped Claude live probe (#103994)
(cherry picked from commit b71e0c78f0)
2026-07-14 02:42:29 -07:00
Vincent Koc b5a09dc300 fix(release): harden Claude CLI live probe
(cherry picked from commit ff5d3d06fb)
2026-07-14 02:42:29 -07:00
Dallin Romney 0a9400bb74 test(release): align codex guardian proof with auth mode
(cherry picked from commit abdae27b7a)
2026-07-14 02:42:09 -07:00
Peter Steinberger 5921671d39 fix(secrets): harden exec provider diagnostics (#105082)
(cherry picked from commit b6c171901e)
2026-07-14 02:24:09 -07:00
Patrick Erichsen 4e8ddf70b1 ci: bump ClawHub package publish workflow (#97909) 2026-06-29 12:31:49 -07:00
Vincent Koc 0a4d0daa8c fix(parallels): stabilize Windows beta smoke transport 2026-06-28 11:47:10 -07:00
Vincent Koc 89460288c4 ci: move codeql quality off blacksmith (#96258) 2026-06-24 11:48:32 +08:00
Vincent Koc d42b864219 fix(qa): accept pnpm separator for lab up (#96246) 2026-06-24 10:22:56 +08:00
Vincent Koc d4c151844a fix(ci): resolve performance target refs before checkout 2026-06-24 09:51:08 +08:00
Vincent Koc da15cf48bf fix(maint): keep PR landing on squash 2026-06-24 09:28:03 +08:00
Vincent Koc 4d034639ad fix(crabbox): require Xcode for macOS proof 2026-06-24 09:01:42 +08:00
Vincent Koc cd7e3df1ea fix(macos): drop Textual from chat packaging
* fix(macos): drop Textual from chat packaging

* fix(macos): declare concurrency extras dependency
2026-06-24 08:31:05 +08:00
Josh Lehman 96cee6cb64 refactor: route live model reads through session accessor (#96206) 2026-06-23 16:52:22 -07:00
Josh Lehman 5839ef519a refactor: migrate command session persistence to accessor (#96204)
* refactor: migrate command session writes to accessor

* refactor: narrow command session persistence params
2026-06-23 16:52:11 -07:00
Josh Lehman ae433525f0 refactor(gateway): add alias mutation accessor (#96213)
* refactor: add gateway alias mutation accessor

* test: align gateway session entry mocks
2026-06-23 16:51:36 -07:00