ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-25 03:45:46 -06:00
Code Issues Packages Projects Releases Wiki Activity
62,483 Commits 4,367 Branches 373 Tags
eab4841bfd8a8a4b538503f72902f3bbdb244443
Commit Graph

1631 Commits

Author SHA1 Message Date
Dallin Romney ec500af40a fix(release): isolate extended-stable Docker aliases (#112822) 
* fix(release): isolate extended-stable Docker aliases

(cherry picked from commit db9915fedb)

# Conflicts:
#	.agents/skills/release-openclaw-maintainer/SKILL.md
#	.agents/skills/release-openclaw-maintainer/references/extended-stable-backports.md
#	.github/workflows/docker-release.yml
#	docs/docs_map.md
#	docs/install/docker.md
#	docs/reference/RELEASING.md

* fix(release): harden Docker channel promotion

(cherry picked from commit 505a6fe922)

* docs(release): pin Docker policy into tagged tree

(cherry picked from commit 3ff98457ba)

# Conflicts:
#	.agents/skills/release-openclaw-maintainer/SKILL.md
#	.agents/skills/release-openclaw-maintainer/references/extended-stable-backports.md
#	docs/reference/RELEASING.md

* refactor(release): isolate Docker channel promotion

(cherry picked from commit 3d02c5c821)

# Conflicts:
#	.agents/skills/release-openclaw-maintainer/SKILL.md
#	docs/reference/RELEASING.md

* fix(release): queue Docker publications

(cherry picked from commit b7cb1697ea)

* fix(release): harden docker channel promotion

(cherry picked from commit 7510aa52ce)

# Conflicts:
#	docs/reference/RELEASING.md
#	scripts/lib/npm-publish-plan.d.mts
#	scripts/lib/npm-publish-plan.mjs
#	scripts/openclaw-npm-postpublish-verify.ts

* fix(release): promote Docker aliases after verification

(cherry picked from commit a13cba1484)

# Conflicts:
#	.agents/skills/release-openclaw-maintainer/SKILL.md
#	docs/reference/RELEASING.md

* fix(release): harden Docker channel promotion

(cherry picked from commit ecc07ba7a3)

# Conflicts:
#	docs/ci.md
#	scripts/verify-docker-attestations.d.mts

* fix(release): adapt Docker promotion to maintenance policy helpers
 2026-07-22 18:19:35 -07:00
Dallin Romney 7af0cfc9c5 fix(release): support frozen pre-AI extended-stable publish 2026-07-21 18:05:55 +09:00
Dallin Romney 30bde936ef fix(release): carry the Z.AI API Platform waiver (#110243) 
* test(ci): temporarily omit Z.AI API Platform validation (#109246)

* test(ci): temporarily omit Z.AI API Platform validation

* test(ci): align disabled provider count

(cherry picked from commit 954c77d4ef)

* fix(release): keep waived Z.AI probe out of broad shard

Adapt the Z.AI shard portion of upstream c4b2183db6 (#109272). Exclude the waived API Platform file from the broad agents shard while retaining the dedicated Coding Plan proof.

(cherry picked from commit c4b2183db6)
 2026-07-17 16:48:48 -07:00
Dallin Romney e5a6f6daff fix(ci): pin v6.11 iOS formatter (#110232) 
Adapt the iOS portion of upstream 265ca345a1 (#105242). Keep the generated Xcode lint phase on checksum-verified SwiftFormat 0.61.1 and point its Homebrew-first lookup at the verified binary.

(cherry picked from commit 265ca345a1)
 2026-07-17 16:23:30 -07:00
Dallin Romney 427750041c fix(release): stabilize frozen validation tools (#110214) 
* fix(ci): pin v6.11 SwiftFormat contract

Adapt the frozen-target SwiftFormat 0.61.1 pin and checksum from 7772d798dd and ce671c3513, with bounded download behavior from e0394c2ab4. Avoid formatting native sources or importing native runtime changes into the npm-only maintenance candidate.

* fix(release): load no-write images without attestations

Apply the validation-only Docker exporter fix from 69f8198ba3 (#103891): local --load exports cannot carry SBOM/provenance manifest lists. Registry-published images remain out of scope.
 2026-07-17 16:08:44 -07:00
Dallin Romney 3341ade2bf fix(release): restore frozen validation startup (#110210) 
* fix(release): restore frozen validation startup

Adapt the no-write validation portion of b597a8d364 (#103834) for the 6.x extended-stable workflow set. Remove validation-owned image publisher jobs instead of granting write permissions; Docker publication remains out of scope.

* fix(release): allow canonical extended-stable checks

Restore the openclaw-release-checks.yml portion of c7810fc697 (#99352) that authorizes the canonical extended-stable/YYYY.M.33 workflow branch.
 2026-07-17 15:41:41 -07:00
Dallin Romney 9a87128cea fix(release): validate candidate installer evidence 2026-07-14 07:13:01 -07:00
Dallin Romney 718e31279c fix(release): complete exact-SHA validation contract 2026-07-14 07:01:03 -07:00
Dallin Romney a80ee54817 fix(release): bind validation evidence summary state 2026-07-14 06:47:38 -07:00
Dallin Romney 7a7ed7a805 ci(release): require enabled Telegram package proof 
Adapted from a24139e199 for the v6.11 package-acceptance workflow.
 2026-07-14 03:46:45 -07:00
Vincent Koc cf58ee42cc fix(release): accept canonical plugin package identities (#105746) 
(cherry picked from commit 13212f1a4d)
 2026-07-14 03:17:30 -07:00
Vincent Koc 1281148184 improve(release): reuse exact-SHA validation evidence (#104162) 
* perf(release): share changelog verification snapshots

* perf(release): reuse exact-SHA validation evidence

* feat(release): checkpoint candidate workflow state

* feat(release): watch CI transitions compactly

* fix(testbox): rotate stale reusable leases

* refactor(release): move CI verifier into scripts

* fix(release): preserve verifier executable mode

* fix(testbox): force noninteractive remote hydration

* perf(testbox): skip sync for proven clean heads

* fix(testbox): keep changed gates synchronized

* fix(testbox): isolate git state probes

* fix(testbox): isolate wrapper git commands

* fix(testbox): preserve git command contracts

* fix(release): validate reused SHA evidence

* fix(release): resume serialized plugin selections

* fix(testbox): sync source on every lease reuse

* fix(release): verify from trusted workflow checkout

* fix(release): gate evidence reuse on trusted lineage

* fix(release): support legacy verifier checkouts

* fix(testbox): export CI across shell snippets

* fix(release): revalidate reused evidence before publish

* fix(release): reject untrusted reuse before lookup

* fix(release): reuse SHA-pinned root evidence

* fix(ci): allow unreleased notes in QA packages

* fix(release): satisfy script lint contracts

* fix(release): handle Unicode workflow refs safely

(cherry picked from commit c47ceb0f3d)
 2026-07-14 03:15:26 -07:00
Peter Steinberger 089fadb2f7 fix(release): keep validation evidence immutable across reruns (#103906) 
* fix(release): bind validation evidence to exact attempts

* test(release): cover exact validation attempts

(cherry picked from commit fece8c9f54)
 2026-07-14 03:12:05 -07:00
Vincent Koc 8dd6ce19c1 ci(release): add plugin npm artifact preflight (#103759) 
* ci(release): add plugin npm preflight proof

* fix(release): bind plugin preflight package evidence

* fix(release): harden plugin preflight trust

* fix(release): bind plugin registry readback

* fix(release): retry npm packument bodies

* fix(release): retry malformed npm packuments

* fix(release): satisfy npm preflight lint

(cherry picked from commit daa653c5cc)
 2026-07-14 03:08:07 -07:00
Vincent Koc e920880ca7 fix(release): make validation proof no-write (#103737) 
* fix(release): make validation proof no-write

* test(release): align no-write workflow contracts

(cherry picked from commit cbe3731f77)
 2026-07-14 03:06:41 -07:00
Peter Steinberger 55e9326036 perf(ci): reuse npm preflight build outputs on same-SHA re-runs 
The preflight ran 61 times at ~14 minutes during 2026.7.1, redoing the
full build and Control UI build after every late-step failure. Restore
dist outputs from an actions/cache keyed on the resolved target SHA and
lockfile hash (mirroring ci.yml's dist-build cache) so re-runs skip only
the build producers; every validation step still runs against the
restored artifacts.

(cherry picked from commit fde42b5eea)
 2026-07-14 02:57:17 -07:00
Peter Steinberger 5f598f3b71 ci: retry transient release workflow reads (#102896) 
(cherry picked from commit aca96d2dcf)
 2026-07-14 02:56:56 -07:00
Peter Steinberger 2d7c97028e ci: make release child dispatch idempotent (#102858) 
(cherry picked from commit 11dda0e5fd)
 2026-07-14 02:56:42 -07:00
Vincent Koc 5e02ed4048 fix(release): validate exact prepared npm package sets (#102759) 
* fix(release): validate prepared npm package sets

Forward-port the beta3 package-set preflight, Telegram, and Parallels validation to main while preserving main's existing Bun install smoke. Recompute decoded proxy response lengths and require artifact tarballs to exactly match the verified manifest.

* fix(release): lock fixture registry proxy origin

(cherry picked from commit 0535679083)
 2026-07-14 02:56:25 -07:00
Vincent Koc 75aad15c8d ci(perf): pin OCM v0.2.25 
(cherry picked from commit 65695bc5bb)
(cherry picked from commit 5828ff8c95)
 2026-07-14 02:42:58 -07:00
Peter Steinberger 899e1d01f9 fix(ci): back off OCM asset retries (#102996) 
(cherry picked from commit 372b527da4)
(cherry picked from commit 4e51372dad)
 2026-07-14 02:42:44 -07:00
Vincent Koc e085fa1a3f ci(release): stabilize anthropic live smoke selection 2026-06-29 19:00:39 -07:00
Patrick Erichsen 4e8ddf70b1 ci: bump ClawHub package publish workflow (#97909) 2026-06-29 12:31:49 -07:00
Vincent Koc 9c154ffa46 ci(release): restore plugin npm token env 2026-06-28 16:45:29 -07:00
Vincent Koc 866fc34e30 ci(release): restore trusted plugin npm publishing 2026-06-28 15:43:18 -07:00
Vincent Koc faa99eeb63 ci(release): allow token plugin npm recovery 2026-06-28 15:29:08 -07:00
Vincent Koc 30109542d3 ci(docker): publish releases to Docker Hub (#97122) 
* ci(docker): publish releases to Docker Hub

* ci(docker): clarify beta image tags

(cherry picked from commit b70d1aae57)
 2026-06-28 11:16:04 -07:00
Vincent Koc 89460288c4 ci: move codeql quality off blacksmith (#96258) 2026-06-24 11:48:32 +08:00
Vincent Koc d4c151844a fix(ci): resolve performance target refs before checkout 2026-06-24 09:51:08 +08:00
Vincent Koc cc981f8a73 ci: build iOS app for iOS changes 2026-06-24 04:32:08 +08:00
Vincent Koc 59713194fc fix(ci): avoid relinking identical node tools 2026-06-24 02:43:25 +08:00
Vincent Koc 58552f6d7c ci: make release maturity scorecard opt-in 2026-06-23 23:32:45 +08:00
Vincent Koc 9dbdefd43c fix(ci): keep release QA evidence branch-compatible 2026-06-23 19:24:27 +08:00
Vincent Koc 0177521375 fix(ci): pass resolved ref to maturity QA evidence 2026-06-23 19:18:13 +08:00
Vincent Koc c714bfd8b6 fix(ci): allow release QA evidence workflow calls 2026-06-23 19:06:49 +08:00
Dallin Romney 7e0083ce0b ci: add release QA profile evidence (#95094) 
* ci: add release qa profile evidence

* ci: simplify release qa profile evidence

* ci: reuse qa profile evidence workflow

* ci: remove inherited secrets lint comment

* ci: pass qa profile evidence secret explicitly

* ci: run maturity scorecard in release checks

* ci: declare maturity scorecard reusable secret
 2026-06-23 02:27:00 -07:00
Vincent Koc f354889efa fix(crabbox): share Windows hydrate handoff path 2026-06-23 11:16:13 +02:00
Dallin Romney e2bcde9b1c ci: add codex maturity scorecard agent (#95919) 2026-06-23 01:22:21 -07:00
Dallin Romney f6b2a5ffb4 test(qa): harden all-profile evidence scenarios (#96003) 2026-06-23 00:07:51 -07:00
Vincent Koc 78a8caef38 fix(release): require postpublish evidence artifact 2026-06-23 14:53:14 +08:00
Vincent Koc 3e84836b01 fix(ci): require release QA evidence artifacts 2026-06-23 14:30:11 +08:00
Vincent Koc 0fed6402be fix(ci): require OpenGrep SARIF artifacts 2026-06-23 14:08:20 +08:00
Vincent Koc a13e2b92b3 perf(ci): widen main test fanout and move codeql off blacksmith (#95967) 
* perf(ci): widen main test fanout and move codeql off blacksmith

* test(ci): update fanout guard
 2026-06-23 13:56:29 +08:00
Vincent Koc 1479078a25 fix(ci): require iOS Periphery evidence artifact 2026-06-23 13:17:42 +08:00
Dallin Romney 606706492f ci: fail qa profile evidence on qa failures (#95971) 2026-06-22 22:00:30 -07:00
Vincent Koc 381cec0051 fix(ci): require live proof evidence artifacts 
Require live Mantis and Telegram proof artifact uploads to fail when evidence is missing and guard the workflow invariant.
 2026-06-23 12:43:09 +08:00
Dallin Romney d3dc7aaa87 docs: update maturity scorecard (#95933) 
* docs: update maturity scorecard

* docs: rerender maturity scorecard from all evidence
 2026-06-22 21:37:03 -07:00
Vincent Koc cfff6b2ac6 fix(ci): require QA live evidence artifacts 
Require QA live artifact uploads to fail when evidence is missing and guard the workflow invariant.
 2026-06-23 12:07:48 +08:00
Dallin Romney 4460fa78c3 feat(qa): add "all" taxonomy profile (#95947) 
* qa: add all maturity profile

* test: update qa coverage profile expectations
 2026-06-22 20:49:08 -07:00
Vincent Koc ca0eb62c87 fix(ci): finalize Windows Testbox after setup failures 
Ensure the Windows Testbox workflow runs its lifecycle loop after setup failures and guard the shared Testbox finalization invariant.
 2026-06-23 11:47:10 +08:00