Repository navigation
Fix release audit findings and prepare 1.2.0-rc.1 - #19
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes the twelve reproducible release-audit defects: session-timeout transitions, empty operator restrictions, manual minimization, lifecycle-script cancellation, scheduler registration, renamed/deleted references, stale HTTP health, unsupported website controls, ineffective appearance options, icon-only display, persisted UI validation, and bounded multiline history.
Settings now save explicitly and offer discard on close; expiry restores the last saved configuration. Compact layouts, inline validation, search coverage, localized audit labels and synthetic screenshots are updated. Schema 12 preserves empty restricted scopes; rollback requires the prior configuration backup. Large-editor work avoids repeated snapshots/list reconstruction, and operation locks have bounded storage.
Validation: 273 .NET and 32 Node tests; final native UI run passed 10,088 assertions with no binding warnings; 30/30 process restore/focus cycles and authenticated recovery passed. Chrome/Edge/Firefox each passed 20 isolated switching cycles; Chromium and Firefox Developer Edition passed full restart recovery. A 10-minute synthetic churn run passed with 59 samples and one abrupt launcher restart. The 500-app editor comparison improved median edit/render from 465.45 to 82.28 ms and total allocation from 1.73 GB to 70.8 MB over 20 cycles (includes harness render delay). The clean f08d2b2 candidate also passed 15 bundled setup assertions, all 23 installer install/upgrade/rollback/uninstall checks, and eight-asset manifest/checksum/SPDX validation. It is intentionally unsigned. Required CI independently validates this revision.
Release automation supports beta/RC/stable with existing integrity/scanner/attestation gates, optional configured publisher signing, and explicit stable qualification records. This is a release candidate: real offline-package, target-workstation, Narrator and publisher-signing acceptance remain pending in docs/release-readiness.json. Development fixtures do not close those gates. Detailed evidence, limits and follow-ups are in docs/RELEASE_RESOLUTION_2026-11-03.md and docs/RELEASE_TODO.md.