Commit Graph

22 Commits

Author SHA1 Message Date
Chummy
501257f6d9 ci: remove dev-to-main promotion gate and align main flow 2026-02-28 14:06:08 +08:00
Rui Chen
7d07e46798 ci: remove Homebrew core publishing flow
Remove the manual Homebrew-core publishing workflow and related docs references.

Signed-off-by: Rui Chen <rui@chenrui.dev>
(cherry picked from commit bc8b721b7e)
2026-02-25 22:28:23 +08:00
Chummy
17c606205b docs(ci): document docs deploy promotion and rollback policy 2026-02-25 21:55:13 +08:00
Chummy
53829623fa docs(release): document GHCR vulnerability gate policy 2026-02-25 21:35:57 +08:00
Chummy
84e3e02e0a docs(release): document GHCR tag immutability contract 2026-02-25 21:10:19 +08:00
Chummy
0134a11697 docs(release): map release-notes supply-chain flow 2026-02-25 20:38:51 +08:00
Chummy
076444ce50 docs(release): document artifact contract guard flow 2026-02-25 20:16:35 +08:00
Chummy
b50e66731a docs(ci): document release trigger guardrails 2026-02-25 19:54:17 +08:00
Chummy
3aed919c47 docs(ci): add runbooks and required-check mapping for new lanes 2026-02-25 17:51:04 +08:00
Chummy
8f91f956fd feat(ci): complete security audit governance and resilient CI control lanes 2026-02-24 16:25:53 +08:00
Chummy
81b4680173 ci: add provider connectivity probes matrix and runbook
Implements scheduled/manual connectivity probes with contract-driven provider matrix, categorized failure policy, CI artifacts, and operator runbook.\n\nRefs RMN-5\nRefs RMN-6
2026-02-24 14:38:08 +08:00
Will Sarg
44cac0755c
ci(release): add bot-owned Homebrew publish workflow (#1323) 2026-02-21 20:18:08 -05:00
Will Sarg
6195d1bb79
ci(policy): restrict main PR authors and target bot PRs to dev (#1310) 2026-02-21 17:00:45 -05:00
Will Sarg
19f7682e4d
fix(license): adopt rust-style dual-license layout for github detection (#1308) 2026-02-21 16:48:22 -05:00
Will Sarg
f44c93598f
chore(license): make apache primary while preserving dual-license (#1307) 2026-02-21 16:43:36 -05:00
Will Sarg
4bc1385aed
chore(branch): reconcile dev for clean main promotion (#1290)
* ci(docker): restrict image publish to v* tag pushes (#1280)

* ci(workflow): adopt main/dev split with dev->main promotion gate (#1283)

* ci(docker): restrict image publish to v* tag pushes (#1280)

* ci(workflow): adopt dev->main promotion flow
2026-02-21 13:56:32 -05:00
Will Sarg
dbb2c80c1a
ci(workflow): adopt main/dev split with dev->main promotion gate (#1283)
* ci(docker): restrict image publish to v* tag pushes (#1280)

* ci(workflow): adopt dev->main promotion flow
2026-02-21 13:39:07 -05:00
Will Sarg
da32355ae9
ci(policy): restrict root license file edits to owners (#1273)
* ci(policy): restrict root license file edits to owners

* ci(vorpal): satisfy actionlint output redirection rule
2026-02-21 11:39:50 -05:00
Will Sarg
3e868902ab
fix(ci): sync release publishing with GHCR and add runbook (#1087) 2026-02-20 07:10:09 -05:00
Chummy
b611609c30 ci(docker): publish multi-arch latest and harden release tagging path 2026-02-19 19:32:18 +08:00
Chummy
41c3e62dad fix(docker): unblock workspace build and auto-publish latest image 2026-02-18 17:14:46 +08:00
Will Sarg
69a3b54968
chore(ci): externalize workflow scripts and relocate main flow doc (#722)
* feat: Add GitHub Actions workflows for security audits, CodeQL analysis, contributor updates, performance benchmarks, integration tests, fuzz testing, and reusable Rust build jobs

- Implemented `sec-audit.yml` for Rust package security audits using `rustsec/audit-check` and `cargo-deny-action`.
- Created `sec-codeql.yml` for CodeQL analysis scheduled twice daily.
- Added `sync-contributors.yml` to update the NOTICE file with new contributors automatically.
- Introduced `test-benchmarks.yml` for performance benchmarks using Criterion.
- Established `test-e2e.yml` for running integration and end-to-end tests.
- Developed `test-fuzz.yml` for fuzz testing with configurable runtime.
- Created `test-rust-build.yml` as a reusable job for executing Rust commands with customizable parameters.
- Documented main branch delivery flows in `main-branch-flow.md` for clarity on CI/CD processes.

* ci(workflows): update workflow scripts and rename for clarity; remove obsolete lint feedback script

* chore(ci): externalize workflow scripts and relocate main flow doc
2026-02-17 19:48:37 -05:00