scriptoriumadmin/veritas-kanban
1
0
Fork 0
mirror of https://github.com/BradGroux/veritas-kanban.git synced 2026-08-28 02:44:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
1304 commits 103 branches 50 tags 106 MiB
Commit graph

48 commits

Author SHA1 Message Date
Brad Groux
49e25838e1
ci: reserve release-grade testing for milestones (#1228) 2026-08-24 00:34:36 -05:00
Brad Groux
c9db917422
build: enforce Docker image contract (#1222) 
* build: enforce Docker image contract

* fix: run Docker contract on durable storage

* build: restore 200 MB image contract

* build: complete container runtime contract

* chore: refresh reviewed secret fingerprint

* fix: unwrap Docker backup response

* build: exclude generated Docker context

* build: enforce platform image budgets

* chore: align Docker docs leak baseline
 2026-08-23 23:49:13 -05:00
Brad Groux
2cbfd3b215
fix: stop ignoring tracked storage paths (#1211) 2026-08-23 20:23:07 -05:00
Brad Groux
542d6dd760
build: enforce service filesystem boundary (#1190) 2026-08-23 15:23:14 -05:00
Brad Groux
93e946693d
test: establish critical-path coverage ratchets (#1183) 
* test: add critical-path coverage ratchets

* fix: harden coverage ratchet enforcement

* fix: fetch coverage comparison history

* fix: close coverage policy downgrade paths

* fix: verify changed critical statements

* fix: ignore non-executable coverage changes

* fix: distinguish mixed type-only coverage edits

* fix: classify coverage changes by runtime output

* fix: enforce runtime-significant whitespace changes

* fix: classify multiline coverage changes as hunks

* fix: group equal-line coverage rewrites
 2026-08-23 13:48:41 -05:00
Brad Groux
b1367aa33c
security: add continuous scanning gates (#1180) 
* ci: add continuous security gates

* fix: scope runner context to gitleaks step
 2026-08-23 12:06:20 -05:00
Brad Groux
9c533c4345
ci: pin external actions to immutable revisions (#1179) 2026-08-23 11:39:14 -05:00
Brad Groux
f3abf3642e
fix: support native Vite config loading (#1178)
Some checks are pending
CI / Select Test Scope (push) Waiting to run
Details
CI / Lint & Type Check (push) Waiting to run
Details
CI / Changed Tests (push) Blocked by required conditions
Details
CI / Workspace Unit Tests (push) Blocked by required conditions
Details
CI / Build (push) Waiting to run
Details
CI / Security Audit (push) Waiting to run
Details
Desktop Artifacts / Unsigned macOS Artifact (push) Waiting to run
Details
Desktop Artifacts / Unsigned Linux Artifacts (push) Waiting to run
Details
Desktop Artifacts / Unsigned Windows Artifacts (push) Waiting to run
Details
2026-08-23 11:22:30 -05:00
Brad Groux
e24b75cf3b
fix: make workspace test gate deterministic (#1175) 2026-08-23 10:51:29 -05:00
Brad Groux
0d5ebb3a7a
fix: guard sustainable delivery cadence (#1042) 2026-07-25 02:08:15 -05:00
Brad Groux
5da7e7db82
fix: gate desktop releases on reviewed notes (#1024) 2026-07-24 22:38:37 -05:00
Brad Groux
508c45fcd3
fix(ci): verify executed full-suite steps (#1015) 2026-07-24 18:47:23 -05:00
Brad Groux
5fc3fbdb5e
perf(ci): suppress cosmetic label runs (#1013) 2026-07-24 18:33:29 -05:00
Brad Groux
2f18229ff2
fix: add authoritative native version information (#1009) 
* fix: add authoritative native version information

* docs: explain native version support

* fix: pin patched brace expansion release

* fix: embed desktop release channel
 2026-07-24 17:29:10 -05:00
Brad Groux
4ed08b32c1 ci: make test scope path-aware 2026-07-24 16:24:54 -05:00
Brad Groux
3e759e10bc ci: tier pull request validation 2026-07-24 03:14:24 -05:00
Brad Groux
ce0837a3e6
fix: verify macOS desktop readiness (#929) 2026-07-23 16:37:16 -05:00
Brad Groux
4460ec07ee
fix: enforce runtime security artifact guard (#835) (#836) 2026-07-12 21:39:29 -05:00
dependabot[bot]
490203dcf5
build(deps): bump actions/checkout from 6 to 7 
Update GitHub Actions workflows to use actions/checkout@v7.
 2026-06-26 09:55:34 -05:00
Brad Groux
98f4b25991
Complete v5 release evidence gates
Some checks failed
CI / Lint & Type Check (push) Has been cancelled
Details
CI / Workspace Unit Tests (push) Has been cancelled
Details
CI / Build (push) Has been cancelled
Details
CI / Security Audit (push) Has been cancelled
Details 
Backfill v5.0.0 evidence, fix Scheduled QA SQLite full-profile coverage, and stabilize mobile/PWA release gates.
 2026-06-09 07:33:46 -05:00
Brad Groux
ccdd55ce0b
ci(desktop): validate notarization credential modes 
* ci(desktop): validate notarization credential modes

* Sanitize notarization failure output

---------

Co-authored-by: bradgroux <brad@digitalmeld.io>
 2026-06-09 05:47:32 -05:00
Brad Groux
cb98addc77
Notarize DMG release assets before upload (#686) 2026-06-06 09:43:17 -05:00
Brad Groux
ea2fde6e2c
Sign and verify desktop DMG releases (#685) 2026-06-06 09:29:05 -05:00
Brad Groux
dd7da4218d
Write portable desktop release checksums (#684) 2026-06-06 09:11:45 -05:00
Brad Groux
710c7df7e8
Upload desktop release assets explicitly (#683) 2026-06-06 08:59:10 -05:00
Brad Groux
4a4d0943a8 Refresh v5 desktop release artifacts 2026-06-06 02:17:42 -05:00
Brad Groux
c0be0bdd8f
Clarify v5 desktop platform support boundary 
Clarifies that macOS is the only v5 GA desktop release target and keeps Linux/Windows artifacts labeled as preview-only validation outputs. Closes #645.
 2026-06-05 15:39:09 -05:00
Brad Groux
e840c43d07
Move pnpm settings to workspace config (#630) 2026-06-05 08:15:47 -05:00
Brad Groux
5b4948f34f
Repair scheduled QA workflow dispatch (#588) 2026-06-04 14:54:55 -07:00
dependabot[bot]
0583cb9556
Bump actions/upload-artifact from 5 to 7 (#404) 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-04 13:44:12 -07:00
Brad Groux
6b6dd234cd Add Linux and Windows desktop packaging 2026-06-04 01:46:13 -07:00
Brad Groux
794a22ae7e Harden scheduled QA gates 2026-06-04 00:01:23 -07:00
Brad Groux
7d386659fb
Add v5 performance load coverage (#532) 2026-06-03 04:14:07 -07:00
Brad Groux
f0dceac22f
Add macOS desktop release pipeline (#473) 2026-05-31 17:48:50 -05:00
Brad Groux
f7cff20cd8
test: add v5 dual-storage parity gate 
## Summary

- adds the v5 dual-storage parity fixture and focused parity test suite
- covers rich task metadata, archive lifecycle, comments/chat history, settings/templates, prompt usage, telemetry/activity/status history, and a workflow run
- adds an explicit CI parity step for file and SQLite storage drift
- preserves newer file-mode task metadata on reload and stabilizes SQLite chat ordering
- hardens workflow parity polling for asynchronous run writes

## Verification

- GitHub Actions: Build, Lint & Type Check, Security Audit, Workspace Unit Tests
- Local focused parity test, server typecheck, lint budget, build, and audit high gate
 2026-05-31 05:26:10 -05:00
Brad Groux
522162ae89
test: add v5 permission coverage manifest gate 
## Summary

- adds a v5 permission coverage manifest with classifications, required permissions, denial reasons, and review justifications across REST, WebSocket, CLI, MCP, workflow, transition hook, command palette, and background job surfaces
- adds a Node-based coverage checker that fails when tracked surfaces are missing from the manifest or when REST route prefixes drift from the shared permission map
- wires the checker into CI and documents the manifest gate in the security guide

Closes #420.

## Verification

- `node scripts/check-permission-coverage.mjs`
- `./node_modules/.bin/prettier --check package.json .github/workflows/ci.yml scripts/check-permission-coverage.mjs docs/security/permission-coverage.json docs/security.md`
- `git diff --check`
- `pnpm lint:budget`
- `pnpm build`
- `pnpm audit --prod --audit-level=high` (passes high gate; 3 existing moderate findings)
- GitHub Actions: Build, Lint & Type Check, Security Audit, Workspace Unit Tests
 2026-05-31 05:02:26 -05:00
Brad Groux
d3976f1d74 chore: harden audit findings and release QA 
Add release validation and scheduled QA workflows.

Harden webhook URL handling, API helper edge cases, and runtime version reporting.

Split heavy web bundles, centralize view metadata, and stabilize full-suite tests.
 2026-05-16 18:59:40 -05:00
Brad Groux
ab7ea4642b chore: polish open source repo metadata 2026-05-04 01:46:24 -05:00
dependabot[bot]
f9df657d09
chore: bump pnpm/action-setup from 5 to 6 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 5 to 6.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v5...v6)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 23:21:19 +00:00
dependabot[bot]
a4a506c5c4
chore: bump pnpm/action-setup from 4 to 5 (#260) 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 5.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v4...v5)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-23 20:26:33 -05:00
Brad Groux
5421e01ed1 fix(ci): pin Node 20 for ESLint/ajv compat, override minimatch >=10.2.1 
- ESLint 9 + ajv has incompatibility with Node 22 causing TypeError
- minimatch <10.2.1 ReDoS vulnerability via exceljs dependencies
- Both fixes minimal and targeted to get CI green
 2026-02-21 19:02:56 -06:00
dependabot[bot]
6c96355d75
chore(deps): bump actions/setup-node from 4 to 6 (#133) 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-20 01:52:29 -06:00
dependabot[bot]
f483f17dc7
chore(deps): bump actions/checkout from 4 to 6 (#132) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-20 01:52:25 -06:00
V.K. Watson
9657e731b6
fix: guard updatedTask null check in task routes 
also clean up observations section build warning
 2026-02-20 01:51:45 -06:00
Brad Groux
f50c8a594c fix(ci): add shared build step + fix all type errors across server/cli 
- Add 'Build shared' step to Lint & Type Check job in CI workflow
- Add explicit type annotations to ~50 parameters across server + CLI
- Fix docker-paths test to properly mock filesystem operations
- Verified: clean install → shared build → lint/typecheck/test/build all passing
 2026-02-08 14:29:55 -06:00
Brad Groux
5cfd9d88c2 fix(security): audit dependencies and add automated vulnerability scanning 2026-01-29 04:32:23 -06:00
Brad Groux
a490a8d5dd fix(ci): remove explicit pnpm version to resolve packageManager conflict 2026-01-29 04:15:03 -06:00
Brad Groux
279221ee38 ci: add GitHub Actions CI pipeline 2026-01-28 17:12:18 -06:00