@kungfu-tech/buildchain 2.14.18-alpha.2 → 2.14.18-alpha.4

package/actions/promote-buildchain-ref/README.md

@@ -89,10 +89,11 @@ tries to apply that commit directly. If GitHub still rejects release
 finalization bookkeeping, Buildchain creates or reuses a same-repository
 `buildchain/version-state/*` PR based on the current target channel head and
 returns `finalization-needed=true`; a later idempotent promotion run can resume
-from the durable transaction state. Strict alpha promotion still fails with a
-configuration diagnostic instead of opening a post-publish human PR. Reusable
-wrapper callers should allow `checks: write` so the generated checks are owned by
-GitHub Actions and matches the managed branch protection rule.
+from the durable transaction state. Strict alpha uses the same protected
+version-state PR recovery for its target and dev bookkeeping, and does not move
+tags until those provider-enforced transactions land. Reusable wrapper callers
+should allow `checks: write` so the generated checks are owned by GitHub Actions
+and match the managed branch protection rule.
 
 Stable promotion also protects concurrent development work. The reusable
 wrapper checks out the exact current `dev/vN/vN.M` head as a reconciliation

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "2.14.18-alpha.2",
+    "version": "2.14.18-alpha.4",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v2",
@@ -170,7 +170,7 @@
         "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
       ],
       "breakingDigest": "sha256:1f476fb9a4854b362c4b24cef89a3c7675d7d63baf3bc828d7b8ae7d2787cead",
-      "auditDigest": "sha256:a328740bbd24990af1a95e93055de54ff6261ec6c9943b53d209440c7cb4a4cc"
+      "auditDigest": "sha256:5a5cbec0b5382c34101623ed11f264797b618920d8c98c78e0d14af9f07a1f6b"
     },
     {
       "contractVersion": 1,
@@ -212,7 +212,7 @@
         "promotion reuses PR-stage release-candidate artifacts and does not run the heavy native build matrix"
       ],
       "breakingDigest": "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0",
-      "auditDigest": "sha256:fc3bab430f17f990948c98b93cf1d07643982548881c230e37adac8ad9bdb662"
+      "auditDigest": "sha256:9584d878d09eccaad6f85a031cd90e59c367e19fe6dd7c8bc1f762a50814ec0a"
     },
     {
       "contractVersion": 1,
@@ -641,7 +641,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:06b0ce651bca9d9f9cd53bf734f391bb55851945c8049fb854d881676d0d025a"
+      "auditDigest": "sha256:79677fecc366c7769100648324a597456e03e91768a5e16570a3ce3c171d8e84"
     },
     {
       "contractVersion": 1,
@@ -2928,7 +2928,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
-      "auditDigest": "sha256:fc3bab430f17f990948c98b93cf1d07643982548881c230e37adac8ad9bdb662"
+      "auditDigest": "sha256:9584d878d09eccaad6f85a031cd90e59c367e19fe6dd7c8bc1f762a50814ec0a"
     },
     {
       "contractVersion": 1,
@@ -3126,5 +3126,5 @@
     }
   ],
   "compatibilityDigest": "sha256:df13c3b8066068925ce847b31002201d533034d10d342542422db3a665c10475",
-  "contractDigest": "sha256:b68d06cff4de41052d18b13e7c7af9890331a4e8fa626bb452f48c912a9a1ba1"
+  "contractDigest": "sha256:ffaa9c08b6e032a383356065ddb6b47d18531eebedbd8f508cae1284afa10f6f"
 }