Vincent Koc
54cc90b1b1
fix(release): publish ClawHub bootstrap artifacts immutably ( #103809 )
...
* fix(release): harden ClawHub bootstrap
* fix(release): centralize publication artifact verification
* fix(release): harden publication artifact verification
* fix(release): lock ClawHub bootstrap toolchain
* test(release): assert locked ClawHub binary
* fix(release): pack with trusted ClawHub harness
* fix(release): bound beta verifier artifact reads
* fix(release): bind target and tooling identities
* fix(release): stabilize signed package ordering
* fix(release): bind ClawHub pretag proof
* fix(release): bind ClawHub OIDC readback
* fix(release): bind ClawHub OIDC readback
2026-07-10 13:33:20 -07:00
Patrick Erichsen
5e0652f284
fix: bump ClawHub publish CLI pin ( #98233 )
2026-06-30 11:26:51 -07:00
Vincent Koc
abb6f04e0c
ci(release): harden release controls
...
One-time maintainer-authorized bootstrap merge for the release-gate verifier policy. Exact hosted CI and all supporting workflow gates passed on 66133de419
2026-06-18 03:11:20 +08:00
Patrick Erichsen
6cf06e8e7e
ci: split plugin ClawHub publishing paths
...
* feat: partition clawhub plugin release candidates
* fix: read clawhub trusted publisher config endpoint
* feat: split clawhub plugin bootstrap workflow
* ci: split plugin clawhub publish paths
* ci: pin clawhub package publish workflow
* ci: keep clawhub bootstrap token out of builds
* ci: fix clawhub release dry-run gating
* ci: align clawhub oidc publish refs
* ci: make clawhub bootstrap recovery idempotent
* ci: route clawhub repair candidates through bootstrap
* ci: preserve tideclaw alpha clawhub guards
* ci: simplify clawhub release ref handling
* ci: extract clawhub release routing plan
* ci: extract clawhub release runtime state
* test: guard clawhub release helper executability
* ci: pin ClawHub CLI for plugin publishing
* ci: allow historical ClawHub dry-run validation
* ci: fix ClawHub bootstrap token handoff
2026-06-12 20:16:06 -07:00
