@rightkit/git 0.2.29 → 0.2.31
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/manifest.mjs +4 -1
- package/package.json +1 -1
package/manifest.mjs
CHANGED
|
@@ -1032,13 +1032,16 @@ export function ownershipStep(manifest, lane = "ci") {
|
|
|
1032
1032
|
const command = name === "pnpm" ? "pnpm exec right-release ownership --app ."
|
|
1033
1033
|
: name === "npm" ? "npm exec -- right-release ownership --app ."
|
|
1034
1034
|
: "yarn exec right-release ownership --app .";
|
|
1035
|
+
// Every lane stays advisory until ownership approval keys are enrolled (Adrian, 2026-10-09);
|
|
1036
|
+
// once enrolled, the flag is inert and findings block again.
|
|
1037
|
+
const ownershipCommand = `${command} --advisory-when-pending`;
|
|
1035
1038
|
// Only release-candidate dispatches declare source_revision. Referencing
|
|
1036
1039
|
// inputs.source_revision from other lanes makes actionlint reject their
|
|
1037
1040
|
// generated workflows, even when guarded by an event-name expression.
|
|
1038
1041
|
const sourceRevision = lane === "release-candidate"
|
|
1039
1042
|
? "\${{ inputs.source_revision }}"
|
|
1040
1043
|
: "\${{ github.sha }}";
|
|
1041
|
-
return `\n - name: RightKit ownership (protected registry roots)\n shell: bash\n run: test "$(git rev-parse HEAD)" = "${sourceRevision}" && ${
|
|
1044
|
+
return `\n - name: RightKit ownership (protected registry roots)\n shell: bash\n run: test "$(git rev-parse HEAD)" = "${sourceRevision}" && ${ownershipCommand}`;
|
|
1042
1045
|
}
|
|
1043
1046
|
|
|
1044
1047
|
/**
|
package/package.json
CHANGED