[stack] feat(release): signed managed-release pipeline - #23

Merged

michaelshimeles merged 14 commits into

stack/infrafrom

stack/release

Aug 11, 2026

Commits on Aug 11, 2026

feat(release): signed managed-release pipeline and policy-enforcing CI

michaelshimeles
and
cursoragent
committed
d6458dc
fix(release): patched Go toolchain for govulncheck; shellcheck-clean bootstrap

michaelshimeles
and
cursoragent
committed
097315a
fix(release): build the SDK before type-checking the CLI in validate

michaelshimeles
and
cursoragent
committed
ac3613a
fix(release): build the guest agent from its own module in guest-images

michaelshimeles
and
cursoragent
committed
8f83afe
fix(release): validate the gzip trailer; refresh the Alpine index snapshot

michaelshimeles
and
cursoragent
committed
8c2ac74
fix(release): ship the napi-rs keyring as the CLI package's runtime dependency

michaelshimeles
and
cursoragent
committed
493633e
fix(release): vendor the keyring platform bindings into the CLI tarball

michaelshimeles
and
cursoragent
committed
77eae96
fix(release): keep the manifest OS contract in reviewed key order

michaelshimeles
and
cursoragent
committed
881ba49
fix(release): retry transient snapshot download failures with backoff

michaelshimeles
and
cursoragent
committed
390cd54
fix(release): widen the snapshot retry budget to bridge 5xx bursts

michaelshimeles
and
cursoragent
committed
069e89f
fix(release): record scan observation time at nanosecond precision

michaelshimeles
and
cursoragent
committed
5a0c3d4
fix(release): retry snapshot bodies truncated mid-stream

michaelshimeles
and
cursoragent
committed
337454f
fix(release): refresh the Alpine index snapshot after upstream republish

michaelshimeles
and
cursoragent
committed
ba744a7
fix(release): drain the retention reaper instead of assuming one batch

michaelshimeles
and
cursoragent
committed
fa49c54

Navigation Menu

Uh oh!

[stack] feat(release): signed managed-release pipeline - #23

[stack] feat(release): signed managed-release pipeline#23
michaelshimeles merged 14 commits into
stack/infrafrom
stack/release

Commits on Aug 11, 2026

feat(release): signed managed-release pipeline and policy-enforcing CI

fix(release): patched Go toolchain for govulncheck; shellcheck-clean bootstrap

fix(release): build the SDK before type-checking the CLI in validate

fix(release): build the guest agent from its own module in guest-images

fix(release): validate the gzip trailer; refresh the Alpine index snapshot

fix(release): ship the napi-rs keyring as the CLI package's runtime dependency

fix(release): vendor the keyring platform bindings into the CLI tarball

fix(release): keep the manifest OS contract in reviewed key order

fix(release): retry transient snapshot download failures with backoff

fix(release): widen the snapshot retry budget to bridge 5xx bursts

fix(release): record scan observation time at nanosecond precision

fix(release): retry snapshot bodies truncated mid-stream

fix(release): refresh the Alpine index snapshot after upstream republish

fix(release): drain the retention reaper instead of assuming one batch