Skip to content

Build-matched agent image, launch-time version check, and one gated, verifiable release flow #129

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
magnificentlycursed merged 15 commits into from
Oct 9, 2026
Merged

Build-matched agent image, launch-time version check, and one gated, verifiable release flow #129

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
fa066bc
feat(container): default to the agent image that matches the crosslin…
magnificentlycursed Oct 8, 2026
5f435be
ci(release): gate release images, verify anonymous pulls, and move :l…
magnificentlycursed Oct 8, 2026
643c0ca
fix(build): watch .git/packed-refs only when it exists
magnificentlycursed Oct 8, 2026
9a326ea
fix(container): choose the default image only from positive evidence,…
magnificentlycursed Oct 8, 2026
dc02df1
feat(container): resolve the agent image the same way for every conta…
magnificentlycursed Oct 8, 2026
5c8eecc
feat(container): compare the image's crosslink version with the CLI's…
magnificentlycursed Oct 8, 2026
4b9f988
ci(release): one gated release flow, anonymous digest smoke, safe :la…
magnificentlycursed Oct 8, 2026
0679fb7
docs(release): add RELEASING.md with the gated release flow and a rep…
magnificentlycursed Oct 8, 2026
511423e
docs(changelog): restore the release history 4b9f988c truncated
magnificentlycursed Oct 8, 2026
498ecaf
fix(container): explicit build version, crosslink-specific version la…
magnificentlycursed Oct 8, 2026
881ce0d
ci(release): fail closed, release only from main, build releases with…
magnificentlycursed Oct 8, 2026
45dff75
ci(release): give the promotion job a static name
magnificentlycursed Oct 8, 2026
dd6a670
test(container): wait until fake runtime scripts are executable
magnificentlycursed Oct 8, 2026
0a64807
fix(container): only a registry refusal stops a cached launch; exact …
magnificentlycursed Oct 9, 2026
c1dc726
ci(release): re-runs reuse a pushed version, both binaries are checke…
magnificentlycursed Oct 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,14 @@ jobs:



workflow-lint:
name: Workflow lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: actionlint (includes shellcheck of run steps)
run: docker run --rm -v "$PWD":/repo -w /repo rhysd/actionlint:1.7.12@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667 -color

lint:
name: Lint
runs-on: ubuntu-latest
Expand Down
Loading
Loading