Harden synchronization and release verification - #9

Merged

oovz merged 52 commits into

mainfrom

Sep 12, 2026

Commits on Aug 25, 2026

refactor: simplify sync and repository validation
oovz
committed
f82406e

Commits on Aug 26, 2026

fix(privategit): disable commit and tag signing in private clone Neutralize commit.gpgsign and tag.gpgsign via command-line arguments and safety configuration so global signing settings do not pro…
oovz
committed
f264cc6
feat(cli): add command timeout support
oovz
committed
0618557
fix(doctor): run checks before requiring link state
oovz
committed
f1c7416
fix(atomicfile): retry Windows file replacement on sharing violations Handle transient ERROR_SHARING_VIOLATION and ERROR_ACCESS_DENIED errors in MoveFileEx with bounded retries and backoff.
oovz
committed
d190730
fix(version): fallback to debug buildinfo when ldflags are omitted
oovz
committed
5959651
fix(cli): parse --json=false and flag precedence in pre-execution check
oovz
committed
d39454e
fix(interaction): unblock reader on context cancellation to prevent goroutine leak
oovz
committed
e90e68a
fix(path): reject oversized paths during resolution
oovz
committed
ca0a0be
feat(schema): add schemaVersion to JSON payloads and document schema
oovz
committed
9b4ed19

Commits on Aug 28, 2026

fix(version): preserve ldflags version over buildinfo fallback Default Version to "dev" and only adopt debug.ReadBuildInfo when Version is "dev". This prevents runtime build metadata from overwrit…
oovz
committed
7b17f4e

Commits on Aug 29, 2026

Commits on Aug 30, 2026

Commits on Sep 4, 2026

docs(link): explain the visibility probe and skip flags
oovz
committed
46b51fb
refactor(sync): unify public approval persistence
oovz
committed
9fb02ad
test(json): pin payload variants and doctor exit rules
oovz
committed
7de0721
test(permissions): make config state checks non-vacuous
oovz
committed
52c7750
ci(release): replace provenance wrapper with actions/attest
oovz
committed
70c03ec
build(go): require Go 1.26.8
oovz
committed
9ba6862
fix(state): enforce the 10,000-path limit before enrollment
oovz
committed
34edb4f
fix(gitexec): disconnect stdin for non-interactive commands
oovz
committed
1da9cd7
ci(release): require full CI and CodeQL before building
oovz
committed
3856b04

Commits on Sep 6, 2026

test(app): name regressions by behavior
oovz
committed
043fdbb
fix(add): reject ambiguous Unicode file selections
oovz
committed
0fb10c3
fix(diff): show additions and report I/O failures
oovz
committed
61d4000

Commits on Sep 7, 2026

Commits on Sep 9, 2026

fix(privategit): preserve literal branch names
oovz
committed
3dcd337
fix(cli): classify conflicting flags as invalid usage
oovz
committed
58f93b8

Commits on Sep 10, 2026

test(app): fix symlink assertions and linked-state fixtures
oovz
committed
62653c7
fix(paths): resolve selections through workspace aliases
oovz
committed
c5204e6

Commits on Sep 11, 2026

fix(paths): preserve directory-entry spelling during enrollment
oovz
committed
afafd14
perf(tests): remove Git proxy race exit delays
oovz
committed
0824a8a
ci: disable native test-result caching and retain timing logs
oovz
committed
846a83a

Commits on Sep 12, 2026