Commit Graph

28 Commits

Author SHA1 Message Date
jordanthejet
5dfa722738 ci: consolidate CI/CD pipeline — 6 Rust jobs → 2, unified cache, frequency optimization
Consolidate redundant Rust compilation jobs to cut PR cycle time from 2+ hours
to ~30 minutes by reducing parallel cold compilations and upgrading runners.

CI Run (ci-run.yml):
- Merge lint + workspace-check + package-check → quality-gate (25min, 8vcpu)
- Merge test + build → test-and-build (30min, 8vcpu)
- Unify cache keys: prefix-key=zeroclaw-ci-v1, shared-key=runner.os-rust
- Update ci-required gate, lint-feedback deps to reference new job names

Security Audit (sec-audit.yml):
- Merge audit + deny + security-regressions → rust-security (25min, 8vcpu)
- Merge sbom + unsafe-debt → compliance (lightweight runner)
- Add fast-path: non-Rust PRs skip Rust compilation entirely

Frequency optimization (off PR path):
- sec-codeql.yml: push-to-main + weekly only (was PR + push)
- ci-reproducible-build.yml: push-to-main + weekly only (was PR + push)
- ci-change-audit.yml: push-to-main only (was PR + push)

Runner upgrades:
- All Rust compilation jobs: 2vcpu → blacksmith-8vcpu-ubuntu-2404
- ci-supply-chain-provenance, test-fuzz: upgraded to 8vcpu
- test-e2e: upgraded to 8vcpu, fixed env indentation bug

Feature matrix (feature-matrix.yml):
- Non-default lanes (whatsapp-web, browser-native, nightly-all-features)
  skip on compile profile, run on nightly only
- resolve-profile + summary jobs use ubuntu-latest (no Rust compilation)

Docs/scripts:
- lint_feedback.js: update job name references for quality-gate
- required-check-mapping.md: document new consolidated job names
- ci-map.md: update trigger map, triage guide, maintenance rules
- self-hosted-runner-remediation.md: update job name reference

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-05 15:51:07 -05:00
argenis de la rosa
2dba3b5e57 chore: remove Linear and Hetzner integrations (replay #2809) 2026-03-05 02:17:32 -05:00
xj
7e8dcd3e5a docs(governance): align PR gate policy with hardened protection 2026-03-04 13:34:35 -05:00
xj
8d6a425e51 docs(incident): redact runner host identifiers 2026-03-01 18:46:41 -08:00
xj
acbe9d1e7c fix(ci): address copilot review notes 2026-03-01 18:26:30 -08:00
xj
0dfdb578c1 ci(runners): unblock main with hosted fallback and health checks 2026-03-01 18:22:43 -08:00
chumyin
e4fc97f5f2 ci: harden smoke build against transient runner termination 2026-03-02 00:27:25 +08:00
Chummy
cd70a18fa0 ci: remove dev-to-main promotion gate and align main flow 2026-02-28 14:06:08 +08:00
Chummy
55cabbb70c ci: narrow feature-matrix push scope and add queue hygiene tool 2026-02-28 05:28:25 +08:00
Chummy
e0c1b67929 ops(ci): add self-hosted runner remediation tooling 2026-02-28 05:00:32 +08:00
Chummy
a5cd875f1b ci: reduce non-blocking workflow load 2026-02-28 05:00:19 +08:00
argenis de la rosa
b27b44829a chore: promote dev snapshot to main (resolve #1978/#1970) 2026-02-26 21:09:33 -05:00
Chummy
102af29f97 ci(intake): remove Linear dependency from public PR flow 2026-02-26 20:14:36 +08:00
Chummy
c52603305c docs(ci): align nightly governance docs with active matrix profile 2026-02-25 23:01:49 +08:00
Chummy
9769822dc8 docs(ci): harden matrix/nightly gate mapping and escalation runbooks 2026-02-25 22:29:26 +08:00
Chummy
d9a81409fb feat(ci): formalize canary cohorts and observability policy 2026-02-25 22:29:26 +08:00
Chummy
17c606205b docs(ci): document docs deploy promotion and rollback policy 2026-02-25 21:55:13 +08:00
Chummy
e3c9bd9189 docs(i18n): consolidate localized readmes under docs/i18n 2026-02-25 21:37:51 +08:00
Chummy
53829623fa docs(release): document GHCR vulnerability gate policy 2026-02-25 21:35:57 +08:00
Chummy
84e3e02e0a docs(release): document GHCR tag immutability contract 2026-02-25 21:10:19 +08:00
Chummy
9e7f3cbe81 docs(ci): document stage matrix and history audit outputs 2026-02-25 19:30:11 +08:00
Chummy
d579fb9c3c feat(ci): bridge canary abort to rollback guard dispatch 2026-02-25 18:39:11 +08:00
Chummy
3aed919c47 docs(ci): add runbooks and required-check mapping for new lanes 2026-02-25 17:51:04 +08:00
Chummy
4893ffebad docs(i18n): unify greek localization and docs structure parity 2026-02-25 00:08:28 +08:00
Chummy
8f91f956fd feat(ci): complete security audit governance and resilient CI control lanes 2026-02-24 16:25:53 +08:00
Chummy
81b4680173 ci: add provider connectivity probes matrix and runbook
Implements scheduled/manual connectivity probes with contract-driven provider matrix, categorized failure policy, CI artifacts, and operator runbook.\n\nRefs RMN-5\nRefs RMN-6
2026-02-24 14:38:08 +08:00
Will Sarg
3e868902ab
fix(ci): sync release publishing with GHCR and add runbook (#1087) 2026-02-20 07:10:09 -05:00
Chummy
93e5383cb2 docs: overhaul docs IA and multilingual navigation 2026-02-18 18:06:13 +08:00