bradgroux
10cb7d8414
chore(deps): separate development tools and Dependabot update groups
2026-09-09 15:40:26 -05:00
bradgroux
0b5d657547
fix: configure hosted display before native capture
2026-09-07 21:58:27 -05:00
bradgroux
b3c151e4f8
chore: prepare signed 6.2.0 release capture and notes
2026-09-07 19:42:36 -05:00
Brad Groux
699eab3276
ci: split browser milestone across isolated runners
2026-09-04 11:00:04 -05:00
Brad Groux
943c196140
test: register documentation publication contracts in CI
2026-09-04 10:06:21 -05:00
Brad Groux
bbe66b4443
fix: verify captured media in a docs-only publication commit
2026-09-04 09:50:14 -05:00
Brad Groux
2cd70b1088
test: add native documentation capture producer checkpoint
2026-09-04 05:10:07 -05:00
Brad Groux
bbcb2aa093
fix: gate macOS release uploads on native candidate evidence
2026-09-04 02:32:04 -05:00
Brad Groux
187a6b67e8
fix: preserve explicit full CI requests across stale events ( #1398 )
2026-09-03 20:01:03 -05:00
Brad Groux
bd3751a87e
docs: separate public and internal documentation ( #1353 )
2026-09-02 23:39:31 -05:00
Brad Groux
ef760e1a9a
chore: align CodeQL action revisions ( #1311 )
2026-09-02 15:47:26 -05:00
dependabot[bot]
cd0d708a0b
chore(deps): bump actions/setup-node from 6.5.0 to 7.0.0 ( #1245 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](249970729c...8207627860
2026-08-30 01:02:58 -05:00
Brad Groux
49e25838e1
ci: reserve release-grade testing for milestones ( #1228 )
2026-08-24 00:34:36 -05:00
Brad Groux
c9db917422
build: enforce Docker image contract ( #1222 )
...
* build: enforce Docker image contract
* fix: run Docker contract on durable storage
* build: restore 200 MB image contract
* build: complete container runtime contract
* chore: refresh reviewed secret fingerprint
* fix: unwrap Docker backup response
* build: exclude generated Docker context
* build: enforce platform image budgets
* chore: align Docker docs leak baseline
2026-08-23 23:49:13 -05:00
Brad Groux
2cbfd3b215
fix: stop ignoring tracked storage paths ( #1211 )
2026-08-23 20:23:07 -05:00
Brad Groux
542d6dd760
build: enforce service filesystem boundary ( #1190 )
2026-08-23 15:23:14 -05:00
Brad Groux
93e946693d
test: establish critical-path coverage ratchets ( #1183 )
...
* test: add critical-path coverage ratchets
* fix: harden coverage ratchet enforcement
* fix: fetch coverage comparison history
* fix: close coverage policy downgrade paths
* fix: verify changed critical statements
* fix: ignore non-executable coverage changes
* fix: distinguish mixed type-only coverage edits
* fix: classify coverage changes by runtime output
* fix: enforce runtime-significant whitespace changes
* fix: classify multiline coverage changes as hunks
* fix: group equal-line coverage rewrites
2026-08-23 13:48:41 -05:00
Brad Groux
b1367aa33c
security: add continuous scanning gates ( #1180 )
...
* ci: add continuous security gates
* fix: scope runner context to gitleaks step
2026-08-23 12:06:20 -05:00
Brad Groux
9c533c4345
ci: pin external actions to immutable revisions ( #1179 )
2026-08-23 11:39:14 -05:00
Brad Groux
f3abf3642e
fix: support native Vite config loading ( #1178 )
CI / Select Test Scope (push) Waiting to run
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Blocked by required conditions
CI / Workspace Unit Tests (push) Blocked by required conditions
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Desktop Artifacts / Unsigned macOS Artifact (push) Waiting to run
Desktop Artifacts / Unsigned Linux Artifacts (push) Waiting to run
Desktop Artifacts / Unsigned Windows Artifacts (push) Waiting to run
2026-08-23 11:22:30 -05:00
Brad Groux
e24b75cf3b
fix: make workspace test gate deterministic ( #1175 )
2026-08-23 10:51:29 -05:00
Brad Groux
2cfb89396d
chore(release): prepare Veritas Kanban 6.1.1
...
Audit and resolve the open contributor and dependency backlog, stabilize the release candidate, synchronize versioned documentation, and prepare the verified 6.1.1 release.
2026-08-22 19:55:58 -05:00
Brad Groux
0d5ebb3a7a
fix: guard sustainable delivery cadence ( #1042 )
2026-07-25 02:08:15 -05:00
Brad Groux
a7a59ae494
docs: codify sustainable delivery cadence ( #1032 )
2026-07-25 00:43:07 -05:00
Brad Groux
5da7e7db82
fix: gate desktop releases on reviewed notes ( #1024 )
2026-07-24 22:38:37 -05:00
Brad Groux
508c45fcd3
fix(ci): verify executed full-suite steps ( #1015 )
2026-07-24 18:47:23 -05:00
Brad Groux
5fc3fbdb5e
perf(ci): suppress cosmetic label runs ( #1013 )
2026-07-24 18:33:29 -05:00
Brad Groux
2f18229ff2
fix: add authoritative native version information ( #1009 )
...
* fix: add authoritative native version information
* docs: explain native version support
* fix: pin patched brace expansion release
* fix: embed desktop release channel
2026-07-24 17:29:10 -05:00
Brad Groux
4ed08b32c1
ci: make test scope path-aware
2026-07-24 16:24:54 -05:00
Brad Groux
3e759e10bc
ci: tier pull request validation
2026-07-24 03:14:24 -05:00
Brad Groux
ce0837a3e6
fix: verify macOS desktop readiness ( #929 )
2026-07-23 16:37:16 -05:00
Brad Groux
4460ec07ee
fix: enforce runtime security artifact guard ( #835 ) ( #836 )
2026-07-12 21:39:29 -05:00
dependabot[bot]
490203dcf5
build(deps): bump actions/checkout from 6 to 7
...
Update GitHub Actions workflows to use actions/checkout@v7.
2026-06-26 09:55:34 -05:00
Brad Groux
98f4b25991
Complete v5 release evidence gates
...
CI / Lint & Type Check (push) Has been cancelled
CI / Workspace Unit Tests (push) Has been cancelled
CI / Build (push) Has been cancelled
CI / Security Audit (push) Has been cancelled
Backfill v5.0.0 evidence, fix Scheduled QA SQLite full-profile coverage, and stabilize mobile/PWA release gates.
2026-06-09 07:33:46 -05:00
Brad Groux
ccdd55ce0b
ci(desktop): validate notarization credential modes
...
* ci(desktop): validate notarization credential modes
* Sanitize notarization failure output
---------
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-06-09 05:47:32 -05:00
Brad Groux
cb98addc77
Notarize DMG release assets before upload ( #686 )
2026-06-06 09:43:17 -05:00
Brad Groux
ea2fde6e2c
Sign and verify desktop DMG releases ( #685 )
2026-06-06 09:29:05 -05:00
Brad Groux
dd7da4218d
Write portable desktop release checksums ( #684 )
2026-06-06 09:11:45 -05:00
Brad Groux
710c7df7e8
Upload desktop release assets explicitly ( #683 )
2026-06-06 08:59:10 -05:00
Brad Groux
4a4d0943a8
Refresh v5 desktop release artifacts
2026-06-06 02:17:42 -05:00
Brad Groux
c0be0bdd8f
Clarify v5 desktop platform support boundary
...
Clarifies that macOS is the only v5 GA desktop release target and keeps Linux/Windows artifacts labeled as preview-only validation outputs. Closes #645 .
2026-06-05 15:39:09 -05:00
Brad Groux
e840c43d07
Move pnpm settings to workspace config ( #630 )
2026-06-05 08:15:47 -05:00
Brad Groux
5b4948f34f
Repair scheduled QA workflow dispatch ( #588 )
2026-06-04 14:54:55 -07:00
dependabot[bot]
0583cb9556
Bump actions/upload-artifact from 5 to 7 ( #404 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-04 13:44:12 -07:00
Brad Groux
6b6dd234cd
Add Linux and Windows desktop packaging
2026-06-04 01:46:13 -07:00
Brad Groux
794a22ae7e
Harden scheduled QA gates
2026-06-04 00:01:23 -07:00
Brad Groux
7d386659fb
Add v5 performance load coverage ( #532 )
2026-06-03 04:14:07 -07:00
Brad Groux
f0dceac22f
Add macOS desktop release pipeline ( #473 )
2026-05-31 17:48:50 -05:00
Brad Groux
f7cff20cd8
test: add v5 dual-storage parity gate
...
## Summary
- adds the v5 dual-storage parity fixture and focused parity test suite
- covers rich task metadata, archive lifecycle, comments/chat history, settings/templates, prompt usage, telemetry/activity/status history, and a workflow run
- adds an explicit CI parity step for file and SQLite storage drift
- preserves newer file-mode task metadata on reload and stabilizes SQLite chat ordering
- hardens workflow parity polling for asynchronous run writes
## Verification
- GitHub Actions: Build, Lint & Type Check, Security Audit, Workspace Unit Tests
- Local focused parity test, server typecheck, lint budget, build, and audit high gate
2026-05-31 05:26:10 -05:00
Brad Groux
522162ae89
test: add v5 permission coverage manifest gate
...
## Summary
- adds a v5 permission coverage manifest with classifications, required permissions, denial reasons, and review justifications across REST, WebSocket, CLI, MCP, workflow, transition hook, command palette, and background job surfaces
- adds a Node-based coverage checker that fails when tracked surfaces are missing from the manifest or when REST route prefixes drift from the shared permission map
- wires the checker into CI and documents the manifest gate in the security guide
Closes #420 .
## Verification
- `node scripts/check-permission-coverage.mjs`
- `./node_modules/.bin/prettier --check package.json .github/workflows/ci.yml scripts/check-permission-coverage.mjs docs/security/permission-coverage.json docs/security.md`
- `git diff --check`
- `pnpm lint:budget`
- `pnpm build`
- `pnpm audit --prod --audit-level=high` (passes high gate; 3 existing moderate findings)
- GitHub Actions: Build, Lint & Type Check, Security Audit, Workspace Unit Tests
2026-05-31 05:02:26 -05:00
