@rightkit/git 0.2.11 → 0.2.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightkit/git",
-  "version": "0.2.11",
+  "version": "0.2.12",
   "description": "Public-repo-only GitHub Actions workflow layer: templates, visibility gate, sync/drift/adopt/uninstall for right-git.",
   "license": "MIT OR Apache-2.0",
   "type": "module",

package/render.test.mjs

@@ -50,6 +50,8 @@ test("rust-hybrid ci renders its pinned package manager and gate", () => {
   assert.match(content, /version: 11\.24\.0/);
   assert.match(content, /toolchain: 1\.98\.0/);
   assert.match(content, /bash \.\/scripts\/gate\.sh/);
+  assert.match(content, /os: \["windows-2025"\]/);
+  assert.doesNotMatch(content, /ubuntu-latest|macos-latest/);
 });
 
 test("rust-hybrid release candidate renders product scripts, artifact handoff, and no signing secret", () => {
@@ -67,6 +69,7 @@ test("rust-hybrid release candidate renders product scripts, artifact handoff, a
   );
   assert.match(content, /pnpm run ci:candidate/);
   assert.match(content, /pnpm run ci:candidate-check/);
+  assert.ok(content.indexOf("bash ./scripts/gate.sh") < content.indexOf("Build unsigned release candidate"));
   assert.match(content, /RIGHT_GIT_ARTIFACT_ROOT/);
   assert.match(content, /os: "macos-latest"/);
   assert.match(content, /platform: "windows"/);
@@ -162,6 +165,8 @@ test("rust-hybrid multi-architecture candidates bind every native target to exac
     assert.match(content, new RegExp(`targetTriple: ${JSON.stringify(triple).replace(/[.*+?^${}()|[\\]\\]/g, "\\$&")}`));
   }
   assert.match(content, /targets: \$\{\{ matrix\.targetTriple \}\}/);
+  assert.equal((content.match(/bash \.\/scripts\/gate\.sh/g) ?? []).length, 1);
+  assert.ok(content.indexOf("bash ./scripts/gate.sh") < content.indexOf("Build unsigned release candidate"));
   assert.match(content, /windows-sign:[\s\S]*matrix:[\s\S]*windows-11-arm/);
   assert.match(content, /macos-sign:[\s\S]*matrix:[\s\S]*macos-15-intel/);
   assert.match(content, /name: widgets-unsigned-\$\{\{ matrix\.platform \}\}-\$\{\{ matrix\.architecture \}\}-22\.23\.2/);

package/templates/profiles/rust-hybrid/ci.yml

@@ -19,7 +19,9 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: ${OS_MATRIX}
+        # Full validation stays on one Windows runner; release-candidate
+        # validates every native target before it builds that target.
+        os: ["windows-2025"]
         node: ${NODE_MATRIX}
     runs-on: ${{ matrix.os }}
     steps:

package/templates/profiles/rust-hybrid/release-candidate.yml

@@ -38,6 +38,8 @@ ${PACKAGE_MANAGER_SETUP}
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           workspaces: engine
+      - name: Run full CI validation
+        run: bash ./${GATE_PATH}
       - run: ${INSTALL_COMMAND}
       - name: Build unsigned release candidate
         run: ${PM_RUN} ${CANDIDATE_BUILD_SCRIPT}