Vincent Koc fa86caf94f fix(release): keep protected tooling trusted after main moves (#126881) ...

* fix(release): keep protected tooling trusted after main moves

* fix(release): cover protected tooling recovery paths

* fix(release): honor live tooling contracts

* fix(release): revalidate tooling at npm publish

* fix(release): bind npm publishers to live tooling

* fix(release): preserve trusted dispatch identity

* fix(release): revalidate parent authorization

* fix(release): bind ClawHub to release parent

* docs(release): define frozen tooling identity

* test(release): align ClawHub protected dispatch ref

* fix(release): trust protected plugin npm preflight tooling

* docs(release): scope protected writer guarantees

* fix(release): keep protected tooling foundation npm-only

* test(release): cover trusted npm preflight tooling

2026-08-21 07:24:31 +00:00

..

actions

fix(runtime): classify Node releases consistently across install and launch (#124812)

2026-08-17 00:42:23 -07:00

codeql

feat(secrets): authenticated egress substitution proxy with destination binding (#123216)

2026-08-13 20:49:31 -07:00

codex/prompts

fix(qa): stop Mantis skipping visible Telegram changes (#127032)

2026-08-21 12:33:38 +05:30

images/live-media-runner

ci: preinstall ffmpeg for live media checks

2026-04-29 03:48:33 +01:00

instructions

refactor: remove obsolete commit helper

2026-08-06 18:10:10 -07:00

ISSUE_TEMPLATE

docs(templates): ask feature requesters whether they plan to implement (#109258)

2026-07-16 18:44:41 -07:00

release

ci: mirror Docker release images to Vercel registry (#120058)

2026-08-10 14:45:05 -07:00

workflows

fix(release): keep protected tooling trusted after main moves (#126881)

2026-08-21 07:24:31 +00:00

actionlint.yaml

fix(ci): retain pending QA workflow calls (#126254)

2026-08-20 00:34:26 +08:00

CODEOWNERS

fix(agents): distinguish review routing from enforcement (#126216)

2026-08-20 23:47:14 -07:00

dependabot.yml

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

labeler.yml

refactor(canvas): make the panel a widget presenter (#126030)

2026-08-19 08:21:07 -07:00

package-trusted-sources.json

fix: harden package URL downloads (#85578)

2026-05-23 17:28:29 +01:00

pull_request_template.md

docs: require maintainer edits on pull requests

2026-07-10 09:18:28 -05:00

retired-sticky-disks.json

ci: replace dependency sticky disk with exact cache (#123040)

2026-08-13 01:13:25 -07:00

zizmor.yml

chore(compat): date the annotated deprecation families and expose removal-pending debt (#114002)

2026-07-25 21:01:20 -07:00