Skip to content

chore(release): version packages for v0.0.39 - #165

Merged
leoisadev1 merged 2 commits into
mainfrom
tegami/version-packages
Sep 4, 2026
Merged

chore(release): version packages for v0.0.39#165
leoisadev1 merged 2 commits into
mainfrom
tegami/version-packages

Conversation

@leoisadev1

@leoisadev1 leoisadev1 commented Sep 4, 2026

Copy link
Copy Markdown
Member

Summary

Prepare Akeru Bot v0.0.39.

Changes

  • #141 fix(web): mute routine notices and update actions
  • #151 feat(marketing): add feedback.md, versioned metadata API, rate-limit headers
  • #153 fix(desktop): recover failed update installs
  • #154 fix(release): require signed macOS builds
  • #155 fix(desktop): package lazy server dependencies
  • #156 fix(mcp): open OAuth authorization requests
  • #149 feat(marketing): report page requests to Notra GEO
  • #158 ci: migrate Depot workflows to Tenki
  • #150 fix(settings): remove obsolete thread controls
  • #159 fix(chat): improve bot conversation usability
  • #157 feat(plugins): add Composio integrations
  • #162 fix(plugins): complete OAuth connections
  • #163 feat(marketing): add Grok search pages

Packages

  • @t3tools/desktop: 0.0.380.0.39
  • akeru-bot: 0.0.380.0.39
  • @t3tools/web: 0.0.380.0.39
  • @t3tools/contracts: 0.0.380.0.39

Release automation

  • Future Version Packages pull requests are created and updated automatically.
  • Each automated update starts the required Repository checks.
  • Ordinary package manifest edits do not start a stable release.

@vercel

vercel Bot commented Sep 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
akeru-bot-landing Ready Ready Preview Sep 4, 2026 4:33pm UTC

Request Review

@github-actions github-actions Bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:M labels Sep 4, 2026
@greptile-apps

greptile-apps Bot commented Sep 4, 2026

Copy link
Copy Markdown

Greptile Summary

Summary

The release workflow can skip publishing a stable version when that version bump and a later watched-manifest change are pushed together. This must be corrected before merging.

Confidence Score: 3/5

Not safe to merge until the release workflow compares against the full pushed range.

A reproduced release failure remains in the updated workflow: a multi-commit push can contain a stable version increment, yet publication is suppressed because the workflow compares the tip only with its immediate parent.

Files Needing Attention: .github/workflows/release.yml

T-Rex T-Rex Logs

What T-Rex did

  • T-Rex produced a proof for a posted P1 finding and linked it to the corresponding review comment.
  • T-Rex produced a second proof for another posted P1 finding and linked it to its review comment.
  • T-Rex validated contract behavior by comparing before and tip SHAs across multi-commit and control pushes, showing publish=false for the tip-based push and publish=true for the control push, with no production files changed.

View all artifacts

T-Rex Ran code and verified through T-Rex

Comments Outside Diff (1)

  1. General comment

    P1 Release preflight compares the pushed tip only to its parent

    • Bug
      • For a single push that contains a synchronized version-bump commit followed by a watched-manifest-only commit, .github/workflows/release.yml reads HEAD^ as the previous version. Both HEAD^ and the pushed tip are then 1.1.0, so it sets publish=false. However, the actual GitHub push range started at 1.0.0, meaning a release-worthy version change was included in the push. The workflow path filter is matched because apps/web/package.json changed in the same before..after range.
    • Cause
      • Lines 56 and 58 use HEAD^ rather than the push event's before SHA. On a multi-commit push, HEAD^ is only the immediately preceding commit and not necessarily the repository state before the push.
    • Fix
      • Use the push event's before revision (with appropriate handling for new branches or zero SHA) when reading prior manifests, so the comparison covers the full pushed range.

    T-Rex Ran code and verified through T-Rex

Fix all with Greploop Fix All in Claude Code

Reviews (2): Last reviewed commit: "fix(release): automate version package u..." | Re-trigger Greptile

Keep the generated version pull request body current after Tegami updates its branch, and dispatch the required repository checks explicitly. Skip stable release builds for ordinary manifest edits while rejecting reused release tags.
Comment on lines +55 to +66
if test "$EVENT_NAME" != workflow_dispatch; then
previous_version="$(git show "HEAD^:apps/server/package.json" | node -e "let data=''; process.stdin.on('data', chunk => data += chunk).on('end', () => console.log(JSON.parse(data).version))")"
for manifest in apps/desktop/package.json apps/web/package.json packages/contracts/package.json; do
previous="$(git show "HEAD^:$manifest" | node -e "let data=''; process.stdin.on('data', chunk => data += chunk).on('end', () => console.log(JSON.parse(data).version))")"
if test "$previous" != "$previous_version"; then
printf 'Previous package versions were not synchronized.\n' >&2
exit 1
fi
done
if test "$previous_version" = "$version"; then
printf 'publish=false\n' >> "$GITHUB_OUTPUT"
printf 'Stable version did not change; this push is not a release.\n'

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Compare the full push

If a push contains a version-bump commit followed by another change to a watched manifest, HEAD^ is the version-bump commit rather than the repository state before the push. The preflight then sees the same version at HEAD^ and at the pushed tip, writes publish=false, and skips publishing the new stable release. Read the prior manifests from the push event’s before SHA so the comparison covers every commit in the push.

Artifacts

Evidence from the check

  • The executable script creates the bare remote and runs one- and two-commit push scenarios against the release preflight decision logic, ending with the demonstrated parent-versus-push-range distinction.

Command output from the check

  • The executed script output records the control release decision and the two-commit push that triggers the workflow path filter but writes publish=false, establishing the finding.

Command output from the check

  • The captured command record includes the exact executable script and its actual output with command, working directory, and exit code, ending with a successful reproduction.

View artifacts

T-Rex Ran code and verified through T-Rex

Fix in Claude Code

@leoisadev1 leoisadev1 changed the title Version Packages chore(release): version packages for v0.0.39 Sep 4, 2026
@leoisadev1
leoisadev1 merged commit 1127fda into main Sep 4, 2026
11 checks passed
@leoisadev1
leoisadev1 deleted the tegami/version-packages branch September 4, 2026 17:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:L vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant