Commit Graph

7 Commits

Author SHA1 Message Date
Dallin Romney 427750041c fix(release): stabilize frozen validation tools (#110214)
* fix(ci): pin v6.11 SwiftFormat contract

Adapt the frozen-target SwiftFormat 0.61.1 pin and checksum from 7772d798dd and ce671c3513, with bounded download behavior from e0394c2ab4. Avoid formatting native sources or importing native runtime changes into the npm-only maintenance candidate.

* fix(release): load no-write images without attestations

Apply the validation-only Docker exporter fix from 69f8198ba3 (#103891): local --load exports cannot carry SBOM/provenance manifest lists. Registry-published images remain out of scope.
2026-07-17 16:08:44 -07:00
Dallin Romney 3341ade2bf fix(release): restore frozen validation startup (#110210)
* fix(release): restore frozen validation startup

Adapt the no-write validation portion of b597a8d364 (#103834) for the 6.x extended-stable workflow set. Remove validation-owned image publisher jobs instead of granting write permissions; Docker publication remains out of scope.

* fix(release): allow canonical extended-stable checks

Restore the openclaw-release-checks.yml portion of c7810fc697 (#99352) that authorizes the canonical extended-stable/YYYY.M.33 workflow branch.
2026-07-17 15:41:41 -07:00
Dallin Romney 9a87128cea fix(release): validate candidate installer evidence 2026-07-14 07:13:01 -07:00
Dallin Romney 718e31279c fix(release): complete exact-SHA validation contract 2026-07-14 07:01:03 -07:00
Dallin Romney a80ee54817 fix(release): bind validation evidence summary state 2026-07-14 06:47:38 -07:00
Vincent Koc 1281148184 improve(release): reuse exact-SHA validation evidence (#104162)
* perf(release): share changelog verification snapshots

* perf(release): reuse exact-SHA validation evidence

* feat(release): checkpoint candidate workflow state

* feat(release): watch CI transitions compactly

* fix(testbox): rotate stale reusable leases

* refactor(release): move CI verifier into scripts

* fix(release): preserve verifier executable mode

* fix(testbox): force noninteractive remote hydration

* perf(testbox): skip sync for proven clean heads

* fix(testbox): keep changed gates synchronized

* fix(testbox): isolate git state probes

* fix(testbox): isolate wrapper git commands

* fix(testbox): preserve git command contracts

* fix(release): validate reused SHA evidence

* fix(release): resume serialized plugin selections

* fix(testbox): sync source on every lease reuse

* fix(release): verify from trusted workflow checkout

* fix(release): gate evidence reuse on trusted lineage

* fix(release): support legacy verifier checkouts

* fix(testbox): export CI across shell snippets

* fix(release): revalidate reused evidence before publish

* fix(release): reject untrusted reuse before lookup

* fix(release): reuse SHA-pinned root evidence

* fix(ci): allow unreleased notes in QA packages

* fix(release): satisfy script lint contracts

* fix(release): handle Unicode workflow refs safely

(cherry picked from commit c47ceb0f3d)
2026-07-14 03:15:26 -07:00
Vincent Koc e920880ca7 fix(release): make validation proof no-write (#103737)
* fix(release): make validation proof no-write

* test(release): align no-write workflow contracts

(cherry picked from commit cbe3731f77)
2026-07-14 03:06:41 -07:00