hanzoai/ci
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 5e0e4f906c hanzo-inc resolves to the KMS org it actually seals to main hanzo-dev 2026-08-05 14:40:56 -07:00
  • f098b39ecd a documented example is not an expression to evaluate v2 v1.0.35 v1 hanzo-dev 2026-08-05 14:28:04 -07:00
  • 674fabdcba split the server, do not strip a scheme you assumed v1.0.34 hanzo-dev 2026-08-05 06:34:42 -07:00
  • 3f65c9e24f the test gate reaches our modules at the address they live at v1.0.33 hanzo-dev 2026-08-05 06:31:02 -07:00
  • 8e43277aab sitedeploy self-provisions its project — first run no longer fails v1.0.32 zeekayandhanzo-dev 2026-08-04 18:54:01 -07:00
  • d3823df85a sitedeploy: one implementation of the Sites-plane publish zeekayandClaude Fable 5 2026-08-04 18:30:21 -07:00
  • b6b52b4a81 the gate runs before the image exists, not after it shipped v1.0.31 zeekay 2026-08-04 18:21:44 -07:00
  • 331e05625f push to registry.hanzo.ai by its own name, with a credential from KMS v1.0.30 zeekay 2026-08-04 17:57:07 -07:00
  • 44186bea06 conflictmarkers: the whole shape, not the first line of it v1.0.29 zeekay 2026-08-04 17:26:43 -07:00
  • 0e1a56bd3c the test step has never run, and the gate that would have said so never ran either v1.0.28 zeekay 2026-08-04 17:05:54 -07:00
  • 23862e5c44 two structural refusals: the repo must agree with itself hanzo-dev 2026-08-04 16:13:28 -07:00
  • 842e42c95d build: tests is a string, because a boolean input arrives as false here deliver-the-tests-input hanzo-dev 2026-08-04 14:53:14 -07:00
  • 2145366f95 build: an input the forge does not deliver must not read as "run no tests" hanzo-dev 2026-08-04 14:43:16 -07:00
  • c03487b23f lane: refuse a repo whose workflows sit where no host collects them ci/forge-lane-gate hanzo-dev 2026-08-04 09:41:14 -07:00
  • 74c176639b build: every published image names the commit it was built from v1.0.27 hanzo-dev 2026-08-04 02:00:10 -07:00
  • b323a1189d legal: license original work under Apache-2.0 hanzo-dev 2026-08-03 09:56:44 -07:00
  • 5750426c73 merge: fail closed on a declared build secret that cannot be read zeekay 2026-08-04 01:24:41 -07:00
  • 093b912e51 apply the embedded-KMS read to the .github copy too zeekay 2026-08-04 00:24:23 -07:00
  • 8edb99bb19 give both copies of the reusable the same KMS contract fix/require-declared-build-secrets zeekayandhanzo-dev 2026-08-04 00:04:59 -07:00
  • 9f6bfb8cff fail the build when a declared build_secret is unreadable zeekayandhanzo-dev 2026-08-04 00:00:12 -07:00
  • a2d50bce29 fix: read build secrets from the embedded KMS zeekay 2026-08-03 21:25:12 -07:00
  • d31d20f679 sync: record the forge lineage as landed, since it carries nothing this does not hanzo-dev 2026-08-02 11:03:27 -07:00
  • f01beb8f6f ci: a repo that declares no test gate says so on the run hanzo-dev 2026-08-02 11:01:56 -07:00
  • 07a8c94b14 Merge remote-tracking branch 'origin/wip/ci-local-edits' into HEAD Co-authored-by: Hanzo Dev <dev@hanzo.ai> hanzo-dev 2026-08-02 11:00:42 -07:00
  • c1bd70ca94 fix: provision Node for JS gates that live in a subtree, not just at the root v1.0.26 Claude 2026-08-02 04:13:14 -07:00
  • c9b7153152 ci: name the fleet that actually serves the default, and fix a delegate URL that 404s v1.0.25 hanzo-dev 2026-08-01 21:52:03 -07:00
  • 7cb8c69316 ci: hand the resolved spec credential to the generator too v1.0.24 Claude 2026-08-01 20:06:43 -07:00
  • 81eee4e18d ci: the client lane falls back to GH_PAT, and says which credential it used v1.0.23 Claude 2026-08-01 20:04:26 -07:00
  • d9c8917e18 ci: default GITHUB_WORKFLOW_REF before expanding it — set -u killed the step v1.0.22 Claude 2026-08-01 19:36:00 -07:00
  • 31817412ec ci: the tools checkout says what it tried v1.0.21 Claude 2026-08-01 19:33:22 -07:00
  • 97d22d6a43 ci: the tools checkout must accept a tag ref, not only a branch v1.0.20 Claude 2026-08-01 19:31:40 -07:00
  • 14314da268 gover: the build context decides which go.mod, not where the file sits v1.0.19 hanzo-dev 2026-08-01 16:45:53 -07:00
  • bd016f7a80 build: gate the delegated lane too, not only buildx v1.0.18 hanzo-dev 2026-08-01 16:15:44 -07:00
  • 41947eca48 build: refuse a Go builder image older than the module it compiles hanzo-dev 2026-08-01 16:11:53 -07:00
  • ec658b8dea build: the tools step reads a GitHub-only variable, so every forge build died on line 1 v1.0.17 hanzo-dev 2026-08-01 15:32:09 -07:00
  • 53d4a378d7 rip: the per-repo sync dies — the NATIVE table already names this repo v1.0.16 hanzo-dev 2026-08-01 12:36:40 -07:00
  • a43f5a33fe Merge remote-tracking branch 'forge/main' Co-authored-by: Hanzo Dev <dev@hanzo.ai> v1.0.15 hanzo-dev 2026-08-01 12:29:02 -07:00
  • 108e4f4987 ci: one reusable at two paths, and a channel that cannot be frozen by a branch hanzo-dev 2026-08-01 12:29:02 -07:00
  • 830171c4c7 ci: the client lane checks on a push and moves on a release — one fetch, one document hanzo-dev 2026-08-01 11:27:50 -07:00
  • 8cf87a4082 ci: version: says WHERE a client's version lives — file, tag, or nowhere hanzo-dev 2026-08-01 11:21:13 -07:00
  • eb9e7cbb96 ci: the client lane gates with the repo's own test: block, and tags last hanzo-dev 2026-08-01 11:19:01 -07:00
  • 5f66b28973 ci: every image build publishes a version, not just the tagged ones v1.0.14 hanzo-dev 2026-08-01 11:15:36 -07:00
  • 7e1de4c35f ci: the client lane fires on the release, not on a push hanzo-dev 2026-08-01 10:55:40 -07:00
  • a3f14fbf4c ci: the client lane — one document, eight generated clients hanzo-dev 2026-08-01 10:46:58 -07:00
  • f2066f1333 ci: confirm the lane with one hook left on the forge zandhanzo-dev 2026-08-01 07:42:33 -07:00
  • 7243683ee8 ci: exercise the forge build lane through the system webhook zandhanzo-dev 2026-08-01 07:34:02 -07:00
  • ec73a49f84 checkout: a submodule the caller needs is a submodule it can ask for hanzo-dev 2026-07-31 22:34:14 -07:00
  • 2c918f5368 wip: preserve in-flight work hanzo-dev 2026-07-29 16:30:04 -07:00
  • 66d4f21ba8 sync: move the channel tags, or a caller pinned to @v1 is pinned to 2026 v1.0.13 hanzo-dev 2026-07-28 23:30:00 -07:00
  • 19cc5d61c9 merge: reconcile the forge, which the fast-forward sync could not hanzo-dev 2026-07-28 23:28:25 -07:00
  • df6c025df0 ci: fail any gate that reports success without running a test v1.0.12 hanzo-dev 2026-07-28 22:55:04 -07:00
  • 7ad9222282 ci: take the design from @hanzo/brand instead of copying it v0.3.0 zeekayandhanzo-dev 2026-07-28 17:00:53 -07:00
  • fffae20a9e ci: stop tracking the built binary zeekayandhanzo-dev 2026-07-28 17:00:32 -07:00
  • f8ab325ace sync: mirror release tags to the forge, so tagged versions publish hanzo-dev 2026-07-28 10:47:20 -07:00
  • 31ea5caf86 ci: build itself with its own pipeline zeekayandhanzo-dev 2026-07-27 23:39:43 -07:00
  • 8c54cfea8e ci: scope on the verified org, not on a query parameter zeekayandhanzo-dev 2026-07-27 23:37:17 -07:00
  • aeb6adf4d5 ci: carry build.yml at BOTH paths, so one tag serves both forges hanzo-dev 2026-07-28 00:31:44 -07:00
  • 92143e5e8b ci: build itself with its own pipeline v0.2.0 zeekayandhanzo-dev 2026-07-27 23:39:43 -07:00
  • 05b75b2fd2 ci: scope on the verified org, not on a query parameter zeekayandhanzo-dev 2026-07-27 23:37:17 -07:00
  • 3445d7acfe binaries: publish to a bucket, and gate the bits once instead of twice feat/binaries-s3-bucket hanzo-dev 2026-07-27 22:55:38 -07:00
  • 844e746c32 feat(ci): binaries: could only mean go build, so half the contract had no toolchain feat/binaries-run-out hanzo-dev 2026-07-27 23:04:33 -07:00
  • c4e3445839 ci: pull main from GitHub — the forge had drifted 3 commits with no transport zooqueenandhanzo-dev 2026-07-27 19:37:59 -07:00
  • 58ed7ea7b4 feat(ci): binaries: — build a plugin once, and every host installs the same bits v1.0.11 hanzo-dev 2026-07-27 16:01:51 -07:00
  • 0b976af3e1 feat: the ci.hanzo.ai dashboard — a view over Hanzo Git, not a second CI v0.1.0 zeekayandhanzo-dev 2026-07-27 15:23:12 -07:00
  • 0b7a45a7d9 ci: drop the Gitea mirror-sync nudge hanzo-dev 2026-07-27 10:27:15 -07:00
  • ddf123485a ci: publish the reusable from .hanzo/workflows, and leave GitHub only a sync zeekayandhanzo-dev 2026-07-26 16:55:03 -07:00
  • 522aa9e17b fix(ci): the release image tag IS the git tag, and no-deploy callers skip deploy v1.0.10 zeekay 2026-07-26 11:23:23 -07:00
  • 6a755f27b5 ci: publish images to oci.hanzo.ai, and say so when we do not v1.0.9 hanzo-dev 2026-07-25 13:44:40 -07:00
  • a66bd46cb2 fix(ci): universe push retry is shallow-clone-safe (fetch+reset+reapply, not rebase) rescue/main-local preserve/spark-local hanzo-dev 2026-07-22 04:03:22 -07:00
  • f19e157205 fix(ci): universe push retry is shallow-clone-safe (fetch+reset+reapply, not rebase) v1.0.8 hanzo-dev 2026-07-22 04:03:22 -07:00
  • fe00b22aaf fix(ci): universe push rebases+retries on non-fast-forward — concurrent deploys no longer stall the roll hanzo-dev 2026-07-22 00:19:25 -07:00
  • 9a5ba3d5c7 fix(ci): universe push rebases+retries on non-fast-forward — concurrent deploys no longer stall the roll v1.0.7 hanzo-dev 2026-07-22 00:19:25 -07:00
  • 123a72df80 fix(ci): deploy step is GitOps-authoritative — an expired runner kubeconfig no longer false-fails a live deploy hanzo-dev 2026-07-21 17:02:48 -07:00
  • ceb720a5b5 fix(ci): deploy step is GitOps-authoritative — an expired runner kubeconfig no longer false-fails a live deploy v1.0.6 hanzo-dev 2026-07-21 17:02:48 -07:00
  • eb8eac8c54 feat(ci): source build_secrets from KMS as --build-arg; honor static images[].args hanzo-dev 2026-07-18 12:29:43 -07:00
  • 15e7f01e01 feat(ci): source build_secrets from KMS as --build-arg; honor static images[].args v1.0.5 hanzo-dev 2026-07-18 12:29:43 -07:00
  • 7f02e0645b fix(ci): upgrade GHCR login to the KMS write:packages token (unblocks cms) hanzo-dev 2026-07-18 10:36:58 -07:00
  • 4c55afe813 fix(ci): upgrade GHCR login to the KMS write:packages token (unblocks cms) v1.0.4 hanzo-dev 2026-07-18 10:36:58 -07:00
  • 51b2286b79 fix(ci): GHCR login prefers KMS-backed GH_PAT — push any org package (unblocks cms) hanzo-dev 2026-07-18 10:30:32 -07:00
  • 2127fdf7dc fix(ci): GHCR login prefers KMS-backed GH_PAT — push any org package (unblocks cms) v1.0.3 hanzo-dev 2026-07-18 10:30:32 -07:00
  • 7077cec764 fix(ci): mirror-credential login is best-effort — a registry.hanzo.ai hiccup must not skip the build hanzo-dev 2026-07-17 23:46:54 -07:00
  • 25548f34a0 fix(ci): mirror-credential login is best-effort — a registry.hanzo.ai hiccup must not skip the build v1.0.2 hanzo-dev 2026-07-17 23:46:54 -07:00
  • 1aae2b65a3 ci: pin universe CRs to canonical semver on tag releases (not sha-<short>-amd64) hanzo-dev 2026-07-17 23:16:48 -07:00
  • fcdb02af5f ci: pin universe CRs to canonical semver on tag releases (not sha-<short>-amd64) v1.0.1 hanzo-dev 2026-07-17 23:16:48 -07:00
  • 93eafe4f55 roll: never backward, sweep every same-repo image in the CR backup/dbc-ci-detached-93eafe4f Hanzo AI 2026-07-17 13:02:41 -07:00
  • bd4d78c3a2 roll: never backward, sweep every same-repo image in the CR Hanzo AI 2026-07-17 13:02:41 -07:00
  • 4fcc2e02ce fix(ci): provision Node + corepack for JS test gates (exit-127 corepack-not-found on bare arc runners) Hanzo AI 2026-07-16 10:58:04 -07:00
  • d9d6a0f265 fix(ci): provision Node + corepack for JS test gates (exit-127 corepack-not-found on bare arc runners) Hanzo AI 2026-07-16 10:58:04 -07:00
  • 2866795e2d fix(ci): deploy rollout-timeout configurable, default 600s (180s failed mid-pull on GB-scale images → studio deploys silently failed since 0.15.8); set-image on repo-matching containers only (never '*' wildcard clobbering rclone sidecars on bare deployments) Hanzo AI 2026-07-15 21:59:57 -07:00
  • e4509f4a8b fix(ci): deploy rollout-timeout configurable, default 600s (180s failed mid-pull on GB-scale images → studio deploys silently failed since 0.15.8); set-image on repo-matching containers only (never '*' wildcard clobbering rclone sidecars on bare deployments) Hanzo AI 2026-07-15 21:59:57 -07:00
  • 3083524803 ci: mirror via crane (IAM token realm vs buildx multi-scope) zeekay 2026-07-15 02:59:43 -07:00
  • c5df463e34 ci: mirror via crane (IAM token realm vs buildx multi-scope) zeekay 2026-07-15 02:59:43 -07:00
  • 313180e201 ci: mirror prefers direct REGISTRY_USER/PASSWORD (private repos can't see org KMS secrets on Free); kubeconfig fallback retained zeekay 2026-07-15 02:43:31 -07:00
  • ca618492db ci: mirror prefers direct REGISTRY_USER/PASSWORD (private repos can't see org KMS secrets on Free); kubeconfig fallback retained zeekay 2026-07-15 02:43:31 -07:00
  • 76cf840edb ci: remove bisect artifacts (root cause: caller-org default workflow permissions must be write for permissions: packages: write reusables) zeekay 2026-07-14 23:37:05 -07:00
  • fb7f460370 ci: remove bisect artifacts (root cause: caller-org default workflow permissions must be write for permissions: packages: write reusables) zeekay 2026-07-14 23:37:05 -07:00
  • 28f1664092 ci: min5/6/7 single-variable bisect zeekay 2026-07-14 23:35:39 -07:00
  • 120983607c ci: min5/6/7 single-variable bisect zeekay 2026-07-14 23:35:39 -07:00
  • f3acdc8cf7 ci: min3/min4 bisect zeekay 2026-07-14 23:33:00 -07:00
  • 76324c93b6 ci: min3/min4 bisect zeekay 2026-07-14 23:33:00 -07:00