- Created `qa-test-output-after-fix.txt` and `qa-test-output.txt` to log results of certificate page authentication tests. - Added `build.sh` for deterministic backend builds in CI, utilizing `go list` for efficiency. - Introduced `codeql_scan.sh` for CodeQL database creation and analysis for Go and JavaScript/TypeScript. - Implemented `dockerfile_check.sh` to validate Dockerfiles for base image and package manager mismatches. - Added `sourcery_precommit_wrapper.sh` to facilitate Sourcery CLI usage in pre-commit hooks.
1.9 KiB
1.9 KiB
Beta Release Draft Pull Request
Overview
This draft PR merges recent beta preparation changes from feature/beta-release into feature/alpha-completion to align the alpha integration branch with the latest CI, workflow, and release process improvements.
Changes Included (Summary)
- Workflow token migration: prefer
CHARON_TOKEN(fallbackCPMP_TOKEN) across release and maintenance workflows. - Stabilized release workflow prerelease detection and artifact publication.
- Prior (already merged earlier) CI enhancements: pinned action versions, Docker multi-arch debug tooling reliability, dynamic
dlvbinary resolution. - Documentation updates enumerating each incremental workflow/token adjustment for auditability.
Commits Ahead of feature/alpha-completion
(See docs/beta_release_draft_pr.md for full enumerated list.) Latest unique commit: 5727c586 (refreshed body snapshot).
Rationale
Ensures alpha integration branch inherits hardened CI/release pipeline and updated secret naming policy before further alpha feature consolidation.
Risk & Mitigation
- Secret Name Change: Prefer
CHARON_TOKEN(keepCPMP_TOKENas a fallback). Mitigation: VerifyCHARON_TOKEN(orCPMP_TOKEN) presence before merge. - Workflow Fan-out: Reusable workflow path validated locally; CI run (draft) will confirm.
Follow-ups (Out of Scope)
- Frontend test coverage improvements (ProxyHostForm).
- Additional beta observability and import validation tasks.
Checklist
- YAML lint (pre-commit passed)
- Secret reference consistency
- Release artifact list intact
- Draft PR CI run (pending after opening)
Requested Review Focus
- Confirm
CHARON_TOKEN(orCPMP_TOKENfallback) availability. - Sanity-check release artifact matrix remains correct.
- Spot any residual
CHARON_TOKENorCPMP_TOKENreferences missed.
Generated draft to align branches; will convert to ready-for-review after validation.