studio-engine 0.115.2 → 0.115.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +19 -0
  3. data/lib/studio/version.rb +1 -1
  4. metadata +1 -1
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 0b33af8b08a5ee60cf954b22f461305dac3edb7940033d2cd1b565dc406162db
4
- data.tar.gz: 663f4a93d6160302d52c21bdcb3ecd0408231ffbfd03871ebd83d5898df0d2c6
3
+ metadata.gz: 4140724c34df475a39e2adb97b7645fc369b6fe52b45e5d4a41eb1497bf1f341
4
+ data.tar.gz: f272422f38ec50e272138ae2afa3350b00284bbc75632221ac33b1d9e6e2c9a0
5
5
  SHA512:
6
- metadata.gz: 3157532280598320880922fa4850ae613b496906fe81e55c55e67ae6aefd14d0aa7f1859dd8a21a15b0944e7e947a8448823e432d354abb29d6e7a4d93e06a67
7
- data.tar.gz: 7cdb4881b7a7d0e828966e2e50d68583e12aaf2ce5a082b615fca0774b5039f52e46b0565c7d01a59f6f754e2b26ca2b219eae79c2aea90b50fd14d45cb2b1e6
6
+ metadata.gz: 32c8c2a0954adc102b9814479ef27ada25cf1e771e58cdd7c3807908d73a509401a1e6e969ae306fe370ea39b5318457f56079d400e5390b88b6b235ab4a6e14
7
+ data.tar.gz: 247e08c92ca54516f63bc0d4897b13a7e51179f87e15d609cad843d8223de7b67f899f28903e483f429162358a756bb8ed839251506a64d6182c208a3002af16
data/CHANGELOG.md CHANGED
@@ -4,6 +4,25 @@ The format is [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). This pro
4
4
 
5
5
  ## Unreleased
6
6
 
7
+ ## 0.115.3 — 2026-10-27
8
+
9
+ ### Changed
10
+
11
+ - **Consumer CI holds its credentials tighter.** `.github/workflows/consumer-ci.yml`
12
+ now declares `permissions: contents: read` at the top (no job widens it), sets
13
+ `persist-credentials: false` on every checkout so no token sits in a clone's
14
+ `.git/config` while the consumer suites, `bundle install` and `npm ci` run, and
15
+ mints each job's GitHub App token read-only (`contents`, `metadata`) for only the
16
+ repos that job clones. Same secrets as before. Guard:
17
+ `test/lib/consumer_ci_hardening_test.rb`.
18
+ - **A red `hub-browser` job prints one triage line.** `bin/hub-e2e-subset triage`
19
+ writes `E2E_LANE hub-browser RED: …` as an error annotation naming the failing
20
+ spec files, a listed spec the hub renamed, or the receipt's own errors, so the
21
+ log reads at a glance. It reports and never changes the verdict.
22
+ - **The session store's hello scenarios wait for the answer.** The node harness
23
+ slept a fixed 20ms for a two-hop message chain and flaked on a loaded box; it now
24
+ waits for the message with a 2s deadline. No host change.
25
+
7
26
  ## 0.115.2 — 2026-10-27
8
27
 
9
28
  ### Added
@@ -1,3 +1,3 @@
1
1
  module Studio
2
- VERSION = "0.115.2"
2
+ VERSION = "0.115.3"
3
3
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: studio-engine
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.115.2
4
+ version: 0.115.3
5
5
  platform: ruby
6
6
  authors:
7
7
  - Alex McRitchie