@rightkit/release 0.2.103 → 0.2.105
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +2 -2
- package/release.mjs +4 -1
- package/rightkit-versions.json +8 -4
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@rightkit/release",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.105",
|
|
4
4
|
"description": "Portable release CLI/SDK with fail-closed public GitHub Releases and private R2 + RightApps distribution.",
|
|
5
5
|
"license": "MIT OR Apache-2.0",
|
|
6
6
|
"type": "module",
|
|
@@ -33,4 +33,4 @@
|
|
|
33
33
|
"doctor:all": "node --test right-suite-contract.test.mjs",
|
|
34
34
|
"verify:standalone": "node standalone-clone-verify.mjs"
|
|
35
35
|
}
|
|
36
|
-
}
|
|
36
|
+
}
|
package/release.mjs
CHANGED
|
@@ -726,7 +726,10 @@ async function validateHostedWorkflows(root, appName, workflows, policy) {
|
|
|
726
726
|
// (Windows) and macos-sign (macOS), so publish is unreachable unless every
|
|
727
727
|
// signing/qualification stage actually verified in this exact run.
|
|
728
728
|
const legacyReleasePublishGate = /publish:\n needs: \[[^\n]*installed-qualification[^\n]*\]\n if: \$\{\{ startsWith\(github\.ref, 'refs\/tags\/v'\) && needs\.installed-qualification\.result == 'success'/.test(publishSource);
|
|
729
|
-
|
|
729
|
+
// Template 1.9.0 adds a dry-run rehearsal: publish is additionally unreachable
|
|
730
|
+
// when admission recorded `dry_run`. The clause only narrows the gate, so it
|
|
731
|
+
// is accepted as an optional trailing conjunct.
|
|
732
|
+
const admittedReleasePublishGate = /publish:\n needs: \[(?=[^\n]*\badmission\b)(?=[^\n]*\binstalled-qualification\b)(?=[^\n]*\bmacos-sign\b)[^\n]*\]\n if: \$\{\{ needs\.admission\.outputs\.publish == 'true' && needs\.installed-qualification\.result == 'success' && needs\.macos-sign\.result == 'success'(?: && needs\.admission\.outputs\.dry_run != 'true')? \}\}/.test(publishSource);
|
|
730
733
|
const protectedReleasePublish = releaseChain
|
|
731
734
|
&& (legacyReleasePublishGate || admittedReleasePublishGate)
|
|
732
735
|
&& /\n permissions:\n contents: write\n/.test(publishSource);
|
package/rightkit-versions.json
CHANGED
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
"@rightkit/updates": "0.2.3"
|
|
14
14
|
},
|
|
15
15
|
"stagedNpm": {
|
|
16
|
-
"@rightkit/ax": "0.2.
|
|
16
|
+
"@rightkit/ax": "0.2.4",
|
|
17
17
|
"@rightkit/git": "0.2.25",
|
|
18
18
|
"@rightkit/hooks": "0.1.1",
|
|
19
19
|
"@rightkit/legal": "0.3.1",
|
|
@@ -22,13 +22,16 @@
|
|
|
22
22
|
"@rightkit/logs": "0.1.4",
|
|
23
23
|
"@rightkit/platform-ui": "0.1.1",
|
|
24
24
|
"@rightkit/qa": "0.2.1",
|
|
25
|
-
"@rightkit/release": "0.2.
|
|
25
|
+
"@rightkit/release": "0.2.105",
|
|
26
26
|
"@rightkit/tauri": "0.1.1",
|
|
27
27
|
"@rightkit/updates": "0.2.4"
|
|
28
28
|
},
|
|
29
29
|
"legacyNpm": {
|
|
30
30
|
"@rightkit/ax": [
|
|
31
|
-
"0.2.0"
|
|
31
|
+
"0.2.0",
|
|
32
|
+
"0.2.1",
|
|
33
|
+
"0.2.2",
|
|
34
|
+
"0.2.3"
|
|
32
35
|
],
|
|
33
36
|
"@rightkit/git": [
|
|
34
37
|
"0.2.1",
|
|
@@ -110,7 +113,8 @@
|
|
|
110
113
|
"0.2.96",
|
|
111
114
|
"0.2.97",
|
|
112
115
|
"0.2.98",
|
|
113
|
-
"0.2.99"
|
|
116
|
+
"0.2.99",
|
|
117
|
+
"0.2.104"
|
|
114
118
|
],
|
|
115
119
|
"@rightkit/qa": [
|
|
116
120
|
"0.1.0",
|