Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
693 changes: 3 additions & 690 deletions .github/workflows/release.yml

Large diffs are not rendered by default.

21 changes: 0 additions & 21 deletions CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -138,27 +138,6 @@ Dependency changes need a clear project benefit — fixing a bug, addressing a s

AI-assisted and vibe-coded contributions are welcome, but please review your own changes thoroughly before opening a PR. Even frontier models produce subtle bugs, incorrect assumptions, and code that looks right but isn't.

### Release web synchronization

Release automation regenerates `web/src/data/releases.ts` on the pending Release Please PR while that PR is kept draft, then pushes the synced file and marks the PR ready. Web sync validates with trusted `main` scripts (overlaying only the pending changelog/manifest) in a read-only job, then a separate write-only job applies the verified `releases.ts` artifact so PR-head scripts never run with write credentials. Sync failure cannot block npm or Docker publishing for an already-created release. Automation owns the top generated entry (marked in `releases.ts`); do not hand-edit that file on the bot release branch. To recover the entry on an explicit release/web PR, check out that PR, restore the trusted merge-base copy, then sync and validate:

```bash
base_ref="$(git merge-base origin/main HEAD)"
git show "${base_ref}:web/src/data/releases.ts" > web/src/data/releases.ts
bun install --frozen-lockfile
bun run sync:web-release -- --base-ref "$base_ref"
bun test ./scripts/sync-web-release-entry.test.ts
bun run typecheck
bun run typecheck:type-tests
bun run security:pr-scan -- --base origin/main --head HEAD
git diff --check origin/main...HEAD
bun install --cwd web --frozen-lockfile
bun run web:typecheck
bun run web:build
```

`bun run sync:web-release` writes `web/src/data/releases.ts` from the pending changelog section and manifest version. Commit the generated file and confirm those checks leave tracked files unchanged.

Before submitting, run multiple rounds of review on generated code:

- check for correctness, not just whether it compiles
Expand Down
1 change: 0 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,6 @@
"web:build": "bun run --cwd web build",
"web:preview": "bun run --cwd web preview",
"web:typecheck": "bun run --cwd web typecheck",
"sync:web-release": "bun scripts/sync-web-release-entry.ts --write",
"test": "bun test --feature=UNATTENDED_RETRY --max-concurrency=1",
"test:full": "bun test --feature=UNATTENDED_RETRY --max-concurrency=1",
"test:coverage": "bun test --feature=UNATTENDED_RETRY --coverage --coverage-reporter=lcov --coverage-dir=coverage --max-concurrency=1 && bun run scripts/render-coverage-heatmap.ts",
Expand Down
1 change: 0 additions & 1 deletion release-please-config.json
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,6 @@
"release-type": "node",
"package-name": "@gitlawb/openclaude",
"bump-minor-pre-major": true,
"draft-pull-request": true,
"include-v-in-tag": true
}
}
Expand Down
340 changes: 0 additions & 340 deletions scripts/sync-web-release-entry.test.ts

This file was deleted.

Loading