hanzoai/ci
2
0
Fork 0
mirror of https://github.com/hanzoai/ci.git synced 2026-10-20 15:28:05 +00:00
Code Issues Releases Activity

Commit Graph

  • 4ebfe24145 split the server, do not strip a scheme you assumed v1.0.34 zeekayandHanzo Dev 2026-08-05 06:34:42 -07:00
  • 4deda9a758 the test gate reaches our modules at the address they live at v1.0.33 zeekayandHanzo Dev 2026-08-05 06:31:02 -07:00
  • 4bfca526dc sitedeploy self-provisions its project — first run no longer fails v1.0.32 zeekayandHanzo Dev 2026-08-04 18:54:01 -07:00
  • b1efcbed1f sitedeploy: one implementation of the Sites-plane publish zeekayandHanzo Dev 2026-08-04 18:30:21 -07:00
  • 66211fc2a0 the gate runs before the image exists, not after it shipped v1.0.31 zeekay 2026-08-04 18:21:44 -07:00
  • 16fe02901a push to registry.hanzo.ai by its own name, with a credential from KMS v1.0.30 zeekay 2026-08-04 17:57:07 -07:00
  • a0afa7eaef conflictmarkers: the whole shape, not the first line of it v1.0.29 zeekay 2026-08-04 17:26:43 -07:00
  • 952f27121b the test step has never run, and the gate that would have said so never ran either v1.0.28 zeekay 2026-08-04 17:05:54 -07:00
  • deb6cfb45d two structural refusals: the repo must agree with itself zeekayandHanzo Dev 2026-08-04 16:13:28 -07:00
  • bd453ea631 build: every published image names the commit it was built from v1.0.27 zeekay 2026-08-04 02:00:10 -07:00
  • c55d362a39 legal: license original work under Apache-2.0 zeekayandHanzo Dev 2026-08-03 09:56:44 -07:00
  • 58ef1e6640 merge: fail closed on a declared build secret that cannot be read zeekay 2026-08-04 01:24:41 -07:00
  • a4caf2a870 apply the embedded-KMS read to the .github copy too zeekay 2026-08-04 00:24:23 -07:00
  • d1d2bc653c give both copies of the reusable the same KMS contract zeekayandHanzo Dev 2026-08-04 00:04:59 -07:00
  • a19884b259 fail the build when a declared build_secret is unreadable zeekayandHanzo Dev 2026-08-04 00:00:12 -07:00
  • e88818d544 fix: read build secrets from the embedded KMS zeekay 2026-08-03 21:25:12 -07:00
  • 277e44d52c sync: record the forge lineage as landed, since it carries nothing this does not zeekayandHanzo Dev 2026-08-02 11:03:27 -07:00
  • a9aedc645b ci: a repo that declares no test gate says so on the run zeekayandHanzo Dev 2026-08-02 11:01:56 -07:00
  • 8204b35ac0 Merge remote-tracking branch 'origin/wip/ci-local-edits' into HEAD zeekayandHanzo Dev 2026-08-02 11:00:42 -07:00
  • fff32d92a4 fix: provision Node for JS gates that live in a subtree, not just at the root v1.0.26 zeekayandHanzo Dev 2026-08-02 04:13:14 -07:00
  • 4b48cb9cd9 ci: name the fleet that actually serves the default, and fix a delegate URL that 404s v1.0.25 zeekayandHanzo Dev 2026-08-01 21:52:03 -07:00
  • 82e6e3c672 ci: hand the resolved spec credential to the generator too v1.0.24 zeekayandHanzo Dev 2026-08-01 20:06:43 -07:00
  • 138a24d689 ci: the client lane falls back to GH_PAT, and says which credential it used v1.0.23 zeekayandHanzo Dev 2026-08-01 20:04:26 -07:00
  • 4c75053763 ci: default GITHUB_WORKFLOW_REF before expanding it — set -u killed the step v1.0.22 zeekayandHanzo Dev 2026-08-01 19:36:00 -07:00
  • 6747e18020 ci: the tools checkout says what it tried v1.0.21 zeekayandHanzo Dev 2026-08-01 19:33:22 -07:00
  • 59327453c6 ci: the tools checkout must accept a tag ref, not only a branch v1.0.20 zeekayandHanzo Dev 2026-08-01 19:31:40 -07:00
  • d9bba78d68 gover: the build context decides which go.mod, not where the file sits v1.0.19 zeekayandHanzo Dev 2026-08-01 16:45:53 -07:00
  • 95e27894c7 build: gate the delegated lane too, not only buildx v1.0.18 zeekayandHanzo Dev 2026-08-01 16:15:44 -07:00
  • c8e4db8770 build: refuse a Go builder image older than the module it compiles zeekayandHanzo Dev 2026-08-01 16:11:53 -07:00
  • 27f5611e06 build: the tools step reads a GitHub-only variable, so every forge build died on line 1 v1.0.17 zeekayandHanzo Dev 2026-08-01 15:32:09 -07:00
  • e624f8e0d9 rip: the per-repo sync dies — the NATIVE table already names this repo v1.0.16 zeekayandHanzo Dev 2026-08-01 12:36:40 -07:00
  • d162066cbb Merge remote-tracking branch 'forge/main' v1.0.15 zeekayandHanzo Dev 2026-08-01 12:29:02 -07:00
  • af003280ab ci: one reusable at two paths, and a channel that cannot be frozen by a branch zeekayandHanzo Dev 2026-08-01 12:29:02 -07:00
  • 53d0331c27 ci: the client lane checks on a push and moves on a release — one fetch, one document zeekayandHanzo Dev 2026-08-01 11:27:50 -07:00
  • ecee1a54a7 ci: version: says WHERE a client's version lives — file, tag, or nowhere zeekayandHanzo Dev 2026-08-01 11:21:13 -07:00
  • 20705fee9d ci: the client lane gates with the repo's own test: block, and tags last zeekayandHanzo Dev 2026-08-01 11:19:01 -07:00
  • dae0b86c62 ci: every image build publishes a version, not just the tagged ones v1.0.14 zeekayandHanzo Dev 2026-08-01 11:15:36 -07:00
  • 134acf09da ci: the client lane fires on the release, not on a push zeekayandHanzo Dev 2026-08-01 10:55:40 -07:00
  • 2d598739a3 ci: the client lane — one document, eight generated clients zeekayandHanzo Dev 2026-08-01 10:46:58 -07:00
  • f88cf4da72 ci: confirm the lane with one hook left on the forge zeekayandHanzo Dev 2026-08-01 07:42:33 -07:00
  • 585a8a9ec6 ci: exercise the forge build lane through the system webhook zeekayandHanzo Dev 2026-08-01 07:34:02 -07:00
  • 157cf829a8 checkout: a submodule the caller needs is a submodule it can ask for zeekayandHanzo Dev 2026-07-31 22:34:14 -07:00
  • 122b80e536 wip: preserve in-flight work zeekayandHanzo Dev 2026-07-29 16:30:04 -07:00
  • e3058b8fbc sync: move the channel tags, or a caller pinned to @v1 is pinned to 2026 v1.0.13 zeekayandHanzo Dev 2026-07-28 23:30:00 -07:00
  • a14c6df293 merge: reconcile the forge, which the fast-forward sync could not zeekayandHanzo Dev 2026-07-28 23:28:25 -07:00
  • 65a57955d9 ci: fail any gate that reports success without running a test v1.0.12 zeekayandHanzo Dev 2026-07-28 22:55:04 -07:00
  • b18038925e ci: take the design from @hanzo/brand instead of copying it v0.3.0 zeekayandHanzo Dev 2026-07-28 17:00:53 -07:00
  • c96af8dd84 ci: stop tracking the built binary zeekayandHanzo Dev 2026-07-28 17:00:32 -07:00
  • 32570cb527 sync: mirror release tags to the forge, so tagged versions publish zeekayandHanzo Dev 2026-07-28 10:47:20 -07:00
  • 314ef578f8 ci: build itself with its own pipeline zeekayandHanzo Dev 2026-07-27 23:39:43 -07:00
  • ecd494fabd ci: scope on the verified org, not on a query parameter zeekayandHanzo Dev 2026-07-27 23:37:17 -07:00
  • 60ea40d886 ci: carry build.yml at BOTH paths, so one tag serves both forges zeekayandHanzo Dev 2026-07-28 00:31:44 -07:00
  • d0037c2bbd ci: build itself with its own pipeline v0.2.0 zeekayandHanzo Dev 2026-07-27 23:39:43 -07:00
  • 5a88593ea8 ci: scope on the verified org, not on a query parameter zeekayandHanzo Dev 2026-07-27 23:37:17 -07:00
  • b133c0f457 binaries: publish to a bucket, and gate the bits once instead of twice zeekayandHanzo Dev 2026-07-27 22:55:38 -07:00
  • 3ea40038e5 feat(ci): binaries: could only mean go build, so half the contract had no toolchain zeekayandHanzo Dev 2026-07-27 23:04:33 -07:00
  • 22e125d822 ci: pull main from GitHub — the forge had drifted 3 commits with no transport zooqueenandHanzo Dev 2026-07-27 19:37:59 -07:00
  • b01535fdc7 feat(ci): binaries: — build a plugin once, and every host installs the same bits v1.0.11 zeekayandHanzo Dev 2026-07-27 16:01:51 -07:00
  • a04eaa9819 feat: the ci.hanzo.ai dashboard — a view over Hanzo Git, not a second CI v0.1.0 zeekayandHanzo Dev 2026-07-27 15:23:12 -07:00
  • dec9e17533 ci: drop the Gitea mirror-sync nudge zeekay 2026-07-27 10:27:15 -07:00
  • 4ab89e8e1d ci: publish the reusable from .hanzo/workflows, and leave GitHub only a sync zeekayandHanzo Dev 2026-07-26 16:55:03 -07:00
  • 608bb1dad3 fix(ci): the release image tag IS the git tag, and no-deploy callers skip deploy v1.0.10 zeekayandHanzo Dev 2026-07-26 11:23:23 -07:00
  • 23f001ac85 fix(ci): the release image tag IS the git tag, and no-deploy callers skip deploy zeekay 2026-07-26 11:23:23 -07:00
  • f74c6a80e9 ci: publish images to oci.hanzo.ai, and say so when we do not v1.0.9 zeekay 2026-07-25 13:44:40 -07:00
  • bf2be08241 ci: publish images to oci.hanzo.ai, and say so when we do not zeekay 2026-07-25 13:44:40 -07:00
  • beb2d97f92 fix(ci): universe push retry is shallow-clone-safe (fetch+reset+reapply, not rebase) v1.0.8 zeekayandHanzo Dev 2026-07-22 04:03:22 -07:00
  • f24f8f7252 fix(ci): universe push retry is shallow-clone-safe (fetch+reset+reapply, not rebase) zeekay 2026-07-22 04:03:22 -07:00
  • dc45185757 fix(ci): universe push rebases+retries on non-fast-forward — concurrent deploys no longer stall the roll v1.0.7 zeekayandHanzo Dev 2026-07-22 00:19:25 -07:00
  • 1431da4ca6 fix(ci): universe push rebases+retries on non-fast-forward — concurrent deploys no longer stall the roll zeekay 2026-07-22 00:19:25 -07:00
  • 8690e7c098 fix(ci): deploy step is GitOps-authoritative — an expired runner kubeconfig no longer false-fails a live deploy v1.0.6 zeekayandHanzo Dev 2026-07-21 17:02:48 -07:00
  • 8b0d4151f2 fix(ci): deploy step is GitOps-authoritative — an expired runner kubeconfig no longer false-fails a live deploy zeekay 2026-07-21 17:02:48 -07:00
  • e919e3722d feat(ci): source build_secrets from KMS as --build-arg; honor static images[].args v1.0.5 zeekay 2026-07-18 12:29:43 -07:00
  • 6f8152c210 feat(ci): source build_secrets from KMS as --build-arg; honor static images[].args zeekay 2026-07-18 12:29:43 -07:00
  • 9a20b098bf fix(ci): upgrade GHCR login to the KMS write:packages token (unblocks cms) v1.0.4 zeekay 2026-07-18 10:36:58 -07:00
  • 479eaf78cf fix(ci): upgrade GHCR login to the KMS write:packages token (unblocks cms) zeekay 2026-07-18 10:36:58 -07:00
  • 0f9e470d0d fix(ci): GHCR login prefers KMS-backed GH_PAT — push any org package (unblocks cms) v1.0.3 zeekay 2026-07-18 10:30:32 -07:00
  • 35f7c940f3 fix(ci): GHCR login prefers KMS-backed GH_PAT — push any org package (unblocks cms) zeekay 2026-07-18 10:30:32 -07:00
  • 3340b46612 fix(ci): mirror-credential login is best-effort — a registry.hanzo.ai hiccup must not skip the build v1.0.2 zeekay 2026-07-17 23:46:54 -07:00
  • 72b70b63fb fix(ci): mirror-credential login is best-effort — a registry.hanzo.ai hiccup must not skip the build zeekay 2026-07-17 23:46:54 -07:00
  • a17cc63614 ci: pin universe CRs to canonical semver on tag releases (not sha-<short>-amd64) v1.0.1 zeekay 2026-07-17 23:16:48 -07:00
  • fd4bab2643 ci: pin universe CRs to canonical semver on tag releases (not sha-<short>-amd64) zeekay 2026-07-17 23:16:48 -07:00
  • 9f83717632 roll: never backward, sweep every same-repo image in the CR zeekay 2026-07-17 13:02:41 -07:00
  • 6a9a1ab96e roll: never backward, sweep every same-repo image in the CR zeekay 2026-07-17 13:02:41 -07:00
  • b96778d015 fix(ci): provision Node + corepack for JS test gates (exit-127 corepack-not-found on bare arc runners) zeekay 2026-07-16 10:58:04 -07:00
  • 38dad74a3b fix(ci): provision Node + corepack for JS test gates (exit-127 corepack-not-found on bare arc runners) zeekay 2026-07-16 10:58:04 -07:00
  • a1dd62ab3c fix(ci): deploy rollout-timeout configurable, default 600s (180s failed mid-pull on GB-scale images → studio deploys silently failed since 0.15.8); set-image on repo-matching containers only (never '*' wildcard clobbering rclone sidecars on bare deployments) zeekay 2026-07-15 21:59:57 -07:00
  • f81d32df2c fix(ci): deploy rollout-timeout configurable, default 600s (180s failed mid-pull on GB-scale images → studio deploys silently failed since 0.15.8); set-image on repo-matching containers only (never '*' wildcard clobbering rclone sidecars on bare deployments) zeekay 2026-07-15 21:59:57 -07:00
  • bd7996025b ci: mirror via crane (IAM token realm vs buildx multi-scope) zeekay 2026-07-15 02:59:43 -07:00
  • 939f21197d ci: mirror via crane (IAM token realm vs buildx multi-scope) zeekay 2026-07-15 02:59:43 -07:00
  • 50939fa6ee ci: mirror prefers direct REGISTRY_USER/PASSWORD (private repos can't see org KMS secrets on Free); kubeconfig fallback retained zeekay 2026-07-15 02:43:31 -07:00
  • 2f1998517b ci: mirror prefers direct REGISTRY_USER/PASSWORD (private repos can't see org KMS secrets on Free); kubeconfig fallback retained zeekay 2026-07-15 02:43:31 -07:00
  • 909193f7a1 ci: remove bisect artifacts (root cause: caller-org default workflow permissions must be write for permissions: packages: write reusables) zeekay 2026-07-14 23:37:05 -07:00
  • 6c129fc233 ci: remove bisect artifacts (root cause: caller-org default workflow permissions must be write for permissions: packages: write reusables) zeekay 2026-07-14 23:37:05 -07:00
  • 72b6467164 ci: min5/6/7 single-variable bisect zeekay 2026-07-14 23:35:39 -07:00
  • 9500f3d558 ci: min5/6/7 single-variable bisect zeekay 2026-07-14 23:35:39 -07:00
  • 96f089bf26 ci: min3/min4 bisect zeekay 2026-07-14 23:33:00 -07:00
  • 58f0cde187 ci: min3/min4 bisect zeekay 2026-07-14 23:33:00 -07:00
  • d5b3cc9266 ci: min2 header bisect zeekay 2026-07-14 23:32:16 -07:00
  • d653a0fec2 ci: min2 header bisect zeekay 2026-07-14 23:32:16 -07:00
  • 3132da1d7b ci: min reusable (cross-org bisect) zeekay 2026-07-14 23:31:29 -07:00