7a7ed7a805
ci(release): require enabled Telegram package proof
...
Adapted from a24139e199
2026-07-14 03:46:45 -07:00
cf58ee42cc
fix(release): accept canonical plugin package identities ( #105746 )
...
(cherry picked from commit 13212f1a4d
2026-07-14 03:17:30 -07:00
1281148184
improve(release): reuse exact-SHA validation evidence ( #104162 )
...
* perf(release): share changelog verification snapshots
* perf(release): reuse exact-SHA validation evidence
* feat(release): checkpoint candidate workflow state
* feat(release): watch CI transitions compactly
* fix(testbox): rotate stale reusable leases
* refactor(release): move CI verifier into scripts
* fix(release): preserve verifier executable mode
* fix(testbox): force noninteractive remote hydration
* perf(testbox): skip sync for proven clean heads
* fix(testbox): keep changed gates synchronized
* fix(testbox): isolate git state probes
* fix(testbox): isolate wrapper git commands
* fix(testbox): preserve git command contracts
* fix(release): validate reused SHA evidence
* fix(release): resume serialized plugin selections
* fix(testbox): sync source on every lease reuse
* fix(release): verify from trusted workflow checkout
* fix(release): gate evidence reuse on trusted lineage
* fix(release): support legacy verifier checkouts
* fix(testbox): export CI across shell snippets
* fix(release): revalidate reused evidence before publish
* fix(release): reject untrusted reuse before lookup
* fix(release): reuse SHA-pinned root evidence
* fix(ci): allow unreleased notes in QA packages
* fix(release): satisfy script lint contracts
* fix(release): handle Unicode workflow refs safely
(cherry picked from commit c47ceb0f3d
2026-07-14 03:15:26 -07:00
089fadb2f7
fix(release): keep validation evidence immutable across reruns ( #103906 )
...
* fix(release): bind validation evidence to exact attempts
* test(release): cover exact validation attempts
(cherry picked from commit fece8c9f54
2026-07-14 03:12:05 -07:00
8dd6ce19c1
ci(release): add plugin npm artifact preflight ( #103759 )
...
* ci(release): add plugin npm preflight proof
* fix(release): bind plugin preflight package evidence
* fix(release): harden plugin preflight trust
* fix(release): bind plugin registry readback
* fix(release): retry npm packument bodies
* fix(release): retry malformed npm packuments
* fix(release): satisfy npm preflight lint
(cherry picked from commit daa653c5cc
2026-07-14 03:08:07 -07:00
e920880ca7
fix(release): make validation proof no-write ( #103737 )
...
* fix(release): make validation proof no-write
* test(release): align no-write workflow contracts
(cherry picked from commit cbe3731f77
2026-07-14 03:06:41 -07:00
55e9326036
perf(ci): reuse npm preflight build outputs on same-SHA re-runs
...
The preflight ran 61 times at ~14 minutes during 2026.7.1, redoing the
full build and Control UI build after every late-step failure. Restore
dist outputs from an actions/cache keyed on the resolved target SHA and
lockfile hash (mirroring ci.yml's dist-build cache) so re-runs skip only
the build producers; every validation step still runs against the
restored artifacts.
(cherry picked from commit fde42b5eea
2026-07-14 02:57:17 -07:00
5f598f3b71
ci: retry transient release workflow reads ( #102896 )
...
(cherry picked from commit aca96d2dcf
2026-07-14 02:56:56 -07:00
2d7c97028e
ci: make release child dispatch idempotent ( #102858 )
...
(cherry picked from commit 11dda0e5fd
2026-07-14 02:56:42 -07:00
5e02ed4048
fix(release): validate exact prepared npm package sets ( #102759 )
...
* fix(release): validate prepared npm package sets
Forward-port the beta3 package-set preflight, Telegram, and Parallels validation to main while preserving main's existing Bun install smoke. Recompute decoded proxy response lengths and require artifact tarballs to exactly match the verified manifest.
* fix(release): lock fixture registry proxy origin
(cherry picked from commit 0535679083
2026-07-14 02:56:25 -07:00
75aad15c8d
ci(perf): pin OCM v0.2.25
...
(cherry picked from commit 65695bc5bb5828ff8c95
2026-07-14 02:42:58 -07:00
899e1d01f9
fix(ci): back off OCM asset retries ( #102996 )
...
(cherry picked from commit 372b527da44e51372dad
2026-07-14 02:42:44 -07:00
e085fa1a3f
ci(release): stabilize anthropic live smoke selection
2026-06-29 19:00:39 -07:00
4e8ddf70b1
ci: bump ClawHub package publish workflow ( #97909 )
2026-06-29 12:31:49 -07:00
9c154ffa46
ci(release): restore plugin npm token env
2026-06-28 16:45:29 -07:00
866fc34e30
ci(release): restore trusted plugin npm publishing
2026-06-28 15:43:18 -07:00
faa99eeb63
ci(release): allow token plugin npm recovery
2026-06-28 15:29:08 -07:00
30109542d3
ci(docker): publish releases to Docker Hub ( #97122 )
...
* ci(docker): publish releases to Docker Hub
* ci(docker): clarify beta image tags
(cherry picked from commit b70d1aae57
2026-06-28 11:16:04 -07:00
89460288c4
ci: move codeql quality off blacksmith ( #96258 )
2026-06-24 11:48:32 +08:00
d4c151844a
fix(ci): resolve performance target refs before checkout
2026-06-24 09:51:08 +08:00
cc981f8a73
ci: build iOS app for iOS changes
2026-06-24 04:32:08 +08:00
59713194fc
fix(ci): avoid relinking identical node tools
2026-06-24 02:43:25 +08:00
58552f6d7c
ci: make release maturity scorecard opt-in
2026-06-23 23:32:45 +08:00
9dbdefd43c
fix(ci): keep release QA evidence branch-compatible
2026-06-23 19:24:27 +08:00
0177521375
fix(ci): pass resolved ref to maturity QA evidence
2026-06-23 19:18:13 +08:00
c714bfd8b6
fix(ci): allow release QA evidence workflow calls
2026-06-23 19:06:49 +08:00
7e0083ce0b
ci: add release QA profile evidence ( #95094 )
...
* ci: add release qa profile evidence
* ci: simplify release qa profile evidence
* ci: reuse qa profile evidence workflow
* ci: remove inherited secrets lint comment
* ci: pass qa profile evidence secret explicitly
* ci: run maturity scorecard in release checks
* ci: declare maturity scorecard reusable secret
2026-06-23 02:27:00 -07:00
f354889efa
fix(crabbox): share Windows hydrate handoff path
2026-06-23 11:16:13 +02:00
e2bcde9b1c
ci: add codex maturity scorecard agent ( #95919 )
2026-06-23 01:22:21 -07:00
f6b2a5ffb4
test(qa): harden all-profile evidence scenarios ( #96003 )
2026-06-23 00:07:51 -07:00
78a8caef38
fix(release): require postpublish evidence artifact
2026-06-23 14:53:14 +08:00
3e84836b01
fix(ci): require release QA evidence artifacts
2026-06-23 14:30:11 +08:00
0fed6402be
fix(ci): require OpenGrep SARIF artifacts
2026-06-23 14:08:20 +08:00
a13e2b92b3
perf(ci): widen main test fanout and move codeql off blacksmith ( #95967 )
...
* perf(ci): widen main test fanout and move codeql off blacksmith
* test(ci): update fanout guard
2026-06-23 13:56:29 +08:00
1479078a25
fix(ci): require iOS Periphery evidence artifact
2026-06-23 13:17:42 +08:00
606706492f
ci: fail qa profile evidence on qa failures ( #95971 )
2026-06-22 22:00:30 -07:00
381cec0051
fix(ci): require live proof evidence artifacts
...
Require live Mantis and Telegram proof artifact uploads to fail when evidence is missing and guard the workflow invariant.
2026-06-23 12:43:09 +08:00
d3dc7aaa87
docs: update maturity scorecard ( #95933 )
...
* docs: update maturity scorecard
* docs: rerender maturity scorecard from all evidence
2026-06-22 21:37:03 -07:00
cfff6b2ac6
fix(ci): require QA live evidence artifacts
...
Require QA live artifact uploads to fail when evidence is missing and guard the workflow invariant.
2026-06-23 12:07:48 +08:00
4460fa78c3
feat(qa): add "all" taxonomy profile ( #95947 )
...
* qa: add all maturity profile
* test: update qa coverage profile expectations
2026-06-22 20:49:08 -07:00
ca0eb62c87
fix(ci): finalize Windows Testbox after setup failures
...
Ensure the Windows Testbox workflow runs its lifecycle loop after setup failures and guard the shared Testbox finalization invariant.
2026-06-23 11:47:10 +08:00
f80d9b6eae
fix(ci): finalize testbox sessions after setup failures
...
Ensure Testbox wrapper workflows finalize backend sessions even when setup fails, align the check timeout fallback with the documented 120-minute default, and guard the workflow invariants.
2026-06-23 11:26:30 +08:00
ace3fe969b
fix(ci): honor reusable QA evidence failure policy
...
Make QA Profile Evidence failure handling explicit for direct and reusable callers. Direct manual runs still fail on non-zero QA profiles by default, while maturity scorecard reusable calls can collect failed QA evidence for parent rendering. Verified with actionlint, diff check, Testbox changed gate, PR CI, and CodeQL.
2026-06-23 10:44:12 +08:00
b71ddbf1b4
ci: simplify maturity scorecard QA evidence inputs ( #95898 )
...
* ci: simplify maturity scorecard evidence inputs
* ci: keep maturity renderer defaults runnable
* ci: validate maturity evidence source
* ci: split maturity scorecard codex agent
* ci: remove codex copy from maturity evidence workflow
* ci: narrow maturity evidence workflow secrets
2026-06-22 19:24:43 -07:00
33206ee583
fix(ci): use available Android SDK platform
...
Restores Android CI to a publicly installable SDK platform and keeps Gradle compileSdk aligned with the workflow install/cache key. Rolls back the API-37-only AndroidX core slice until Android 37 is available to hosted CI, while preserving the unrelated Kotlin dependency bump.
Verification:
- Google SDK repository index check: android-36 exists; android-37/android-37.0 do not.
- git diff --check
- Testbox changed gate: tbx_01kvs3r1bc925pxya94zey23c8
- PR CI: 68 successful, 12 skipped, 0 failing, 0 pending; Android build/play and both Android unit-test lanes passed.
2026-06-23 10:18:28 +08:00
27711b500c
ci: add maturity scorecard renderer ( #94272 ) ( #95901 )
...
* ci: add maturity scorecard renderer
* ci: render qa scorecard evidence
* ci: type maturity docs renderer
* ci: tighten maturity artifact inputs
* ci: move maturity renderer under qa scripts
* ci: share maturity score schema
* ci: centralize maturity taxonomy validation
* ci: move maturity scores under qa
* ci: remove docs maturity score source
* docs: simplify maturity scorecard output
* docs: commit generated maturity scorecard
* docs: group maturity pages
* docs: simplify maturity scorecard dates
* docs: promote maturity nav tab
* docs: clean up maturity pages
* docs: remove maturity outline page
* docs: filter maturity taxonomy doc links
* docs: simplify maturity taxonomy tables
* docs: keep artifact taxonomy links
* docs: simplify lts scorecard display
* docs: clarify maturity score definitions
* docs: derive maturity coverage from evidence
* docs: hide maturity scorecard until evidence
* docs: remove placeholder maturity pages
* docs: keep maturity scores out of pr
* ci: open maturity scorecard docs pr
2026-06-22 18:55:06 -07:00
1658fb6c14
fix(ci): restore QA workflow gates ( #95890 )
2026-06-23 09:26:35 +08:00
fee8ab4764
ci: generalize QA profile evidence workflow ( #95880 )
...
* ci: generalize qa profile evidence workflow
* ci: keep qa evidence workflow usable on qa failures
2026-06-22 17:33:02 -07:00
2ce4a7483a
fix(ci): use workflow revision for proof checks
...
Checkout the trusted workflow revision for the Real behavior proof gate so old PR events with stale base SHAs can still run the current checker scripts.
Proof:
- `tbx_01kvrrqq6tnwee3r41p22sy0qk`: touched-file format check passed.
- `tbx_01kvrrqq6tnwee3r41p22sy0qk`: `corepack pnpm test:serial test/scripts/ci-workflow-guards.test.ts` passed.
- `tbx_01kvrrqq6tnwee3r41p22sy0qk`: `corepack pnpm check:changed` passed for tooling.
- PR CI passed with no failing or pending checks.
2026-06-23 07:11:23 +08:00
89de454f82
ci: add manual release qa evidence workflow ( #95876 )
2026-06-22 15:48:59 -07:00
Dallin Romney