Commit Graph - ci - Hanzo Git

hanzoai/ci

Fork 0

mirror of https://github.com/hanzoai/ci.git synced 2026-10-20 15:28:05 +00:00

Commit Graph

Select branches

Hide Pull Requests

ci/probe-empty

ci/probe-none

ci/probe-noop

ci/probe-optout

ci/test-verdict

ci/verdict-probe

main

refusal-proof

site-incremental

wip/move-universe

#1

#10

#11

#2

#3

#4

#5

#6

#7

#8

#9

mirror/ci/kms-v1-migration-f330d57

mirror/feat/delegate-mode-44d092f

mirror/feat/opt-in-multiarch-885d509

mirror/fix/provision-parse-toolchain-8ae1c46

mirror/main-eebaf17

probe-base

probe-final

v0.1.0

v0.2.0

v0.3.0

v1

v1-probe

v1.0.1

v1.0.10

v1.0.100

v1.0.101

v1.0.102

v1.0.103

v1.0.104

v1.0.105

v1.0.106

v1.0.107

v1.0.108

v1.0.109

v1.0.11

v1.0.110

v1.0.111

v1.0.112

v1.0.113

v1.0.114

v1.0.115

v1.0.116

v1.0.117

v1.0.118

v1.0.119

v1.0.12

v1.0.120

v1.0.121

v1.0.122

v1.0.123

v1.0.124

v1.0.125

v1.0.126

v1.0.127

v1.0.128

v1.0.129

v1.0.13

v1.0.130

v1.0.131

v1.0.132

v1.0.133

v1.0.14

v1.0.15

v1.0.16

v1.0.17

v1.0.18

v1.0.19

v1.0.2

v1.0.20

v1.0.21

v1.0.22

v1.0.23

v1.0.24

v1.0.25

v1.0.26

v1.0.27

v1.0.28

v1.0.29

v1.0.3

v1.0.30

v1.0.31

v1.0.32

v1.0.33

v1.0.34

v1.0.35

v1.0.36

v1.0.37

v1.0.38

v1.0.39

v1.0.4

v1.0.40

v1.0.41

v1.0.42

v1.0.43

v1.0.44

v1.0.45

v1.0.46

v1.0.47

v1.0.48

v1.0.49

v1.0.5

v1.0.50

v1.0.51

v1.0.52

v1.0.53

v1.0.54

v1.0.55

v1.0.56

v1.0.57

v1.0.58

v1.0.59

v1.0.6

v1.0.60

v1.0.61

v1.0.62

v1.0.63

v1.0.64

v1.0.65

v1.0.66

v1.0.67

v1.0.68

v1.0.69

v1.0.7

v1.0.70

v1.0.71

v1.0.72

v1.0.73

v1.0.74

v1.0.75

v1.0.76

v1.0.77

v1.0.78

v1.0.79

v1.0.8

v1.0.80

v1.0.81

v1.0.82

v1.0.83

v1.0.84

v1.0.85

v1.0.86

v1.0.87

v1.0.88

v1.0.89

v1.0.9

v1.0.90

v1.0.91

v1.0.92

v1.0.93

v1.0.94

v1.0.95

v1.0.96

v1.0.97

v1.0.98

v1.0.99

v2

v2.1.0

v2.1.1

v2.1.2

v2.1.3

v2.1.4

v2.1.5

v2.1.6

v2.1.7

v2.1.8

v2.1.9

a8f840f803 fix(kms_test): the login-refusal cases blank the run's own credential main zeekay 2026-10-20 08:27:59 -07:00
46217c695a fix(review): the review job carries HANZO_CI_TRUSTED, and its step asks it v2 zeekay 2026-10-20 08:09:24 -07:00
e1c4e4876b perf(runner): the image carries the actions build.yml names, cloned zeekay 2026-10-20 08:05:25 -07:00
6de3b93fcf build: oci.hanzo.ai pulls through to ghcr.io, so nothing copies an image there Hanzo Devandzeekay 2026-10-20 07:49:21 -07:00
a9b8273cec perf(certclaims): one grep per rule over every file, not two per file v2.1.9 zeekay 2026-10-20 07:49:08 -07:00
fd1aa150d9 perf(cache): parts move eight at a time, and a restore says where its time went v2.1.8 zeekay 2026-10-20 07:42:29 -07:00
28c0db22ea perf(site): ask the origin's sample all at once, hash on every core, and say where the time went zeekay 2026-10-20 07:42:29 -07:00
39e2fd4a70 site: copy: false publishes every site from its own bytes, all at once z 2026-10-17 23:28:54 -07:00
a53bab567d fix(review): a reviewer with no identity warns and lets the release go zeekay 2026-10-17 09:45:39 -07:00
c426a5d538 docs: a caller grants what build.yml declares zeekay 2026-10-17 04:19:52 -07:00
eefd9dc1dc fix(cache): a Go cache save keeps what its run used v1.0.133 zeekay 2026-10-16 23:18:26 -07:00
600a2d1feb perf(ci): review the diff beside the tests zeekay 2026-10-16 23:03:30 -07:00
21f008dc0c fix(cut): a crate's Cargo.lock moves with its Cargo.toml v1.0.132 zeekay 2026-10-15 08:55:23 -07:00
71d8efdaed perf(test): a split gate checks the repository's invariants once v1.0.131 zeekay 2026-10-15 07:06:13 -07:00
cf9f1c4fd9 fix(tools): on Hanzo Git, fetch the tools at the ref the caller pins v1.0.130 v1.0.129 zeekay 2026-10-15 06:53:18 -07:00
cce63d6a49 feat(test): gates: "!a,b" runs every entry but those v1.0.128 zeekay 2026-10-15 06:41:26 -07:00
5351ba8f81 feat(test): a share of the gate only gates v1.0.127 zeekay 2026-10-15 06:38:27 -07:00
7e1b11b216 feat(test): gates runs a named share of hanzo.yml's test block v1.0.126 zeekay 2026-10-15 06:37:32 -07:00
805c91c7bb fix(site): a preview the edge does not serve reads back from cloud's record v1.0.125 zooqueenandHanzo Dev 2026-10-15 05:27:13 -07:00
7c126e209f Universe is hanzo-inc/universe wip/move-universe zeekay 2026-10-09 10:27:37 -07:00
386b7a2694 feat(cache): bin/cache carries any directory between runners; gocache is its Go caller zeekay 2026-10-09 02:01:12 -07:00
1983074a46 chore(ci): merge the publish wait, cut on v2.1.6 as v2.1.7 zeekay 2026-10-04 00:20:05 -07:00
5262d63804 fix(ci): a push waits for the running publish instead of cancelling it v2.1.7 zeekay 2026-10-04 00:19:53 -07:00
e8a9edfa44 bin/kms writes the ID token's mask to stderr, so what a caller captures is the secret alone, and both callers refuse a capture that holds more without printing it. v1.0.124 zooqueenandHanzo Dev 2026-10-02 14:26:29 -07:00
6523c8623c The KMS step reads the owner from env, which keeps its script under the expression limit zeekay 2026-09-30 07:26:51 -07:00
641bdcb728 Grant the reusable the run's ID token zeekay 2026-09-30 07:24:18 -07:00
b3ed274349 A run logs in to KMS with its own ID token zeekay 2026-09-30 07:23:53 -07:00
30af8df1e7 fix(site): the sampled asset check does not glob the brackets in a route's chunk name v1 zeekay 2026-09-30 07:09:57 -07:00
fece5973c3 feat(site): identical objects of a sibling site are copied by the plane, not sent zeekay 2026-09-30 06:56:52 -07:00
524eac6ff1 fix(site): read the previous manifest from the host that serves the prefix zeekay 2026-09-30 00:36:47 -07:00
fb8ace6f61 perf(site): upload each batch through one parallel curl; retry only what was not accepted zeekay 2026-09-29 22:10:42 -07:00
cae4ed5d93 fix(site): the action names the ref whose bin/site runs; the completion is asked again on a 5xx zeekay 2026-09-29 22:06:35 -07:00
84b05273ab feat(site): publish only what changed; sites publish in parallel zeekay 2026-09-29 21:24:23 -07:00
44a36738bf imgver reads the published floor with the KMS GitHub token when there is no GH_PAT v2.1.6 v1.0.123 zeekay 2026-09-30 00:48:10 -07:00
9422b3ab94 fix(site): read the previous manifest from the host that serves the prefix site-incremental zeekay 2026-09-30 00:36:47 -07:00
aada6c224f HANZO_CI_TRUSTED is spelled out in each job, because the forge keeps env as a raw node per job v2.1.5 v1.0.122 zeekay 2026-09-30 00:24:57 -07:00
67190f581f perf(site): upload each batch through one parallel curl; retry only what was not accepted zeekay 2026-09-29 22:10:42 -07:00
72ae7a720a Public repositories' commit messages state the engineering reason zeekay 2026-09-29 22:08:48 -07:00
ba3c1bdd3b fix(site): the action names the ref whose bin/site runs; the completion is asked again on a 5xx zeekay 2026-09-29 22:06:35 -07:00
50e93e3138 A pull request from a fork runs on a one-job runner, reads no credential, and publishes nothing v2.1.4 v1.0.121 zeekay 2026-09-29 21:57:52 -07:00
66803a147f feat(site): publish only what changed; sites publish in parallel zeekay 2026-09-29 21:24:23 -07:00
312d2f2701 The site deploy token is read in the publish role only, and never for a pull request Hanzo Dev 2026-09-29 13:04:33 -07:00
909203f2ef Seed the PyPI lane's clean venv with pip zeekay 2026-09-29 10:11:11 -07:00
4b737d13ec The tools checkout fetches a caller's pinned sha instead of cloning it as a branch. zeekay 2026-09-28 18:30:31 -07:00
58fd5da11e The cut pushes to github.com with a GitHub token and to the forge with the IAM token. zeekay 2026-09-28 18:13:13 -07:00
80a1a74f48 Probe for libclang under its versioned names v2.1.3 v1.0.120 zeekay 2026-09-27 02:22:23 -07:00
3ceb54383c Report each enqueue assertion so the tally counts it v2.1.2 v1.0.119 zeekay 2026-09-24 10:47:16 -07:00
5339715989 Freeze the enqueue suite's clock zeekay 2026-09-24 10:44:39 -07:00
1efafa8f78 Back off and obey Retry-After at the build door zeekay 2026-09-24 09:46:01 -07:00
e607b8bfc6 Read back only the answer that carried the body zeekay 2026-09-24 10:29:00 -07:00
5e2a320eba Link the runner package to this repository zeekay 2026-09-24 10:19:55 -07:00
4bb3d8c3dd Pin later steps to the restored Go cache zeekay 2026-09-24 10:18:42 -07:00
f6d6172c9b Return from delegate once the door queues zeekay 2026-09-24 10:11:59 -07:00
5d6d7858e4 Carry the Go cache between runners zeekay 2026-09-24 10:10:09 -07:00
09c0fad22f Bake the toolchain into the runner image zeekay 2026-09-24 10:10:00 -07:00
e556ccfd53 Declare the secrets a caller may pass zeekay 2026-09-24 09:44:52 -07:00
957b97ce72 Delete the forge CI caller z 2026-09-24 09:47:42 -07:00
a9e71885a7 Gate on amd64 tests unless a repo asks for arm64 v1.0.118 zeekay 2026-09-24 09:12:46 -07:00
8a9e717ffe Proof only: both gating test jobs skip refusal-proof zooqueenandHanzo Dev 2026-09-24 02:20:17 -07:00
c9541215f9 Publishing's condition calls no status function but always() v1.0.117 zooqueenandHanzo Dev 2026-09-24 02:20:01 -07:00
ec1e619f1f A caller chooses which architectures' tests gate publishing, and can run one more as advisory zooqueenandHanzo Dev 2026-09-24 02:05:17 -07:00
9f66b01ea6 Clone the public client driver anonymously zeekay 2026-09-24 00:28:58 -07:00
117b7ec72f Let a site declare build_secrets zeekay 2026-09-23 19:51:55 -07:00
f16bddbd30 A refused delegate names the org its credential carries zeekayandHanzo Dev 2026-09-23 14:53:12 -07:00
e7bd921f5e The cut writes the release's number into the version file zeekayandHanzo Dev 2026-09-23 11:23:08 -07:00
0875f06c15 Delegate sends an image's context to the build door zeekayandHanzo Dev 2026-09-23 02:39:46 -07:00
a161219f0b Wait out a restarting build door too v1.0.116 zeekayandHanzo Dev 2026-09-23 02:20:43 -07:00
efb58d8b87 Hand grep its input instead of piping into grep -q v1.0.115 zeekayandHanzo Dev 2026-09-23 01:57:09 -07:00
cfa459059e Wait for the build door's slot instead of failing v1.0.114 zeekayandHanzo Dev 2026-09-23 01:47:11 -07:00
8d1cf7c89f kms_test reports its count v1.0.113 zeekayandHanzo Dev 2026-09-23 01:06:54 -07:00
fabcfac1d0 The verdict runs in both jobs, and adjudicates each v1.0.112 zeekayandHanzo Dev 2026-09-23 00:29:21 -07:00
e62a1df9e8 Write the test legs out, and give runner back its meaning v1.0.111 zeekayandHanzo Dev 2026-09-22 23:44:21 -07:00
0a06303c54 Vendor @hanzo/brand 1.4.10, the Zen sheet v1.0.110 zeekayandHanzo Dev 2026-09-22 23:32:17 -07:00
26755c1705 Test on both architectures before anything publishes v1.0.109 zeekayandHanzo Dev 2026-09-22 23:30:35 -07:00
d604b53cea Fetch jq and crane for the machine the step runs on v1.0.108 zeekayandHanzo Dev 2026-09-22 23:14:11 -07:00
a97bee10f9 Reach the build door by its public name v1.0.107 zeekayandHanzo Dev 2026-09-22 23:01:46 -07:00
3c1989c933 fix(site): increase upload attempts to 5 with 60s timeout to prevent socket drop failures zooqueenandHanzo Dev 2026-09-15 18:42:09 -07:00
67460df3b1 The runner image is built where the runners are zeekayandHanzo Dev 2026-09-17 08:24:53 -07:00
94205239af The runner image version names the runner that reads GIT_RUNNER_URL zeekayandHanzo Dev 2026-09-17 06:25:08 -07:00
3f336a2ef7 Go 1.27.1, and the code it can say more simply zeekayandHanzo Dev 2026-09-16 19:09:21 -07:00
d8a47494cd A gated preview answers the read-back 401, and that is the gate working zeekayandHanzo Dev 2026-09-16 14:53:31 -07:00
9990247f51 The runner is git-runner, and it reads GIT_RUNNER_* zeekayandHanzo Dev 2026-09-16 13:32:50 -07:00
e7759383f4 The runner fetches yq for its own architecture zeekayandHanzo Dev 2026-09-16 08:16:07 -07:00
8233c0dfdd Publish both architectures by default zooqueenandHanzo Dev 2026-09-15 18:30:17 -07:00
bd177a688e The runner carries the toolchain its jobs ask for zeekayandHanzo Dev 2026-09-15 17:29:23 -07:00
9e9d121347 Markdown ships as text/markdown zeekayandHanzo Dev 2026-09-11 00:21:54 -07:00
8ecaa8f520 Carry the other architecture's C compiler in the runner image zeekayandHanzo Dev 2026-09-11 00:19:04 -07:00
2ec74300ac A wheel that cannot import must not reach the index zeekayandHanzo Dev 2026-09-10 23:14:22 -07:00
8715f55f4e Leave the runner image to its own lane zeekayandHanzo Dev 2026-09-10 22:00:42 -07:00
8a797209db Call the pipeline on a push to this repo zeekayandHanzo Dev 2026-09-10 22:00:20 -07:00
22a72646d4 Build the runner image for both architectures zeekayandHanzo Dev 2026-09-10 21:59:49 -07:00
0b7fc81a3f Read the tools ref from the caller's own pin zeekayandHanzo Dev 2026-09-10 21:56:41 -07:00
ddcfc70ce4 Let a caller with no image past the delegate lane zeekayandHanzo Dev 2026-09-10 21:56:22 -07:00
445ea7171c Let a release be what a bare pull answers zeekayandHanzo Dev 2026-09-10 21:52:45 -07:00
500a9e63d8 Build both architectures by default, at the one door that can v1.0.106 zeekayandHanzo Dev 2026-09-10 21:45:58 -07:00
ca5bd6acb8 Build the runner image for arm64, and let a JIT runner die zeekayandHanzo Dev 2026-09-10 21:45:37 -07:00
d803d0171c Publish to PyPI from the pipeline that gates it zeekayandHanzo Dev 2026-09-10 21:42:58 -07:00
1eaffa857d Drop the second copy of build.yml zeekayandHanzo Dev 2026-09-10 21:42:51 -07:00
41911fa5bf Post a delegated build to the door that exists zeekayandHanzo Dev 2026-09-10 21:38:57 -07:00
6acb916a0e Resolve the tools by this file's own commit zeekayandHanzo Dev 2026-09-10 21:24:33 -07:00

1 2 3 4 5 ...