gowalk-cicd 1.0.212 → 1.0.213
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -1336,8 +1336,9 @@ mismatched evidence remains refused; do not relabel a receipt or impersonate the
|
|
|
1336
1336
|
`GITHUB_*` environment. Normal delivery still refuses cancelled producers.
|
|
1337
1337
|
|
|
1338
1338
|
From 1.0.212, incomplete GitHub job-step metadata is reconciled by reading the exact producer job
|
|
1339
|
-
within
|
|
1340
|
-
|
|
1339
|
+
within a 60-second budget per producer observation, also bounded by the verification deadline.
|
|
1340
|
+
From 1.0.213, historical recovery's final producer recheck gets a fresh budget after Apple processing.
|
|
1341
|
+
Complete observations add no wait. Producer identity, successful ordered transfer/handoff steps and artifact checks remain
|
|
1341
1342
|
required; contradictory identity, duplicate steps or explicit transfer failure refuse immediately.
|
|
1342
1343
|
`apple_upload_verify_producer_job_metadata_unavailable` means the required observations remained
|
|
1343
1344
|
unavailable, not that the upload failed. Preserve its handoff and build; after GitHub supplies the
|
|
@@ -25,7 +25,8 @@ async function verify(value, artifactId, timeout, dependencies = {}) {
|
|
|
25
25
|
const sleep = dependencies.sleep || delay, started = now(), deadline = started + timeout * 1000;
|
|
26
26
|
const key = dependencies.get ? null : credential();
|
|
27
27
|
const get = dependencies.get || (path => apple.appleGet(path, key, Math.max(1, Math.min(30000, deadline - now()))));
|
|
28
|
-
|
|
28
|
+
// Each producer observation has its own bounded metadata readback within this verification deadline.
|
|
29
|
+
const observation = {now, sleep, deadline};
|
|
29
30
|
await handoff.verifyProducer(value, artifactId, api, dependencies.recoverCancelled === true, observation);
|
|
30
31
|
await handoff.phase(value, api);
|
|
31
32
|
let proof;
|