Skip to content

Promote validated main to release/stable for v0.5.11#89

Merged
yaacovcorcos merged 35 commits into
release/stablefrom
codex/promote-v0.5.11
Jul 23, 2026
Merged

Promote validated main to release/stable for v0.5.11#89
yaacovcorcos merged 35 commits into
release/stablefrom
codex/promote-v0.5.11

Conversation

@yaacovcorcos

Copy link
Copy Markdown
Contributor

Summary

  • promote the final validated main release candidate to protected release/stable
  • pin the v0.5.11 release source to exact commit 640473ff3d1bbce9ec3cbb48b940cb46c99a3e03

Included work

  • contribution and release-policy clarification
  • Add Project source dialog, right dock surfaces, artifact previews, and conversation forks
  • provider-selection and recommended model defaults
  • base-font and numeric editing fixes
  • release-candidate correctness fixes for transcript forks, message ordering, stale async dialogs, new-repository Diff, and Explorer workspace scope
  • fail-closed Linux AppImage sandbox packaging with artifact-level launcher inspection

Verification

  • promotion commit ca49a4d58a796442c786cd0de07553405b00ca63 has parent 1 86cb4e9da9b6abb4dbe929add4ad14b19f3141b1 (current release/stable) and parent 2 640473ff3d1bbce9ec3cbb48b940cb46c99a3e03 (verified main)
  • promotion tree 3f1a32e1e44c53e9e2dd868dc0d837a7ce698291 exactly equals the verified main tree
  • all required PR checks passed before merge
  • PR 86 received exact-head local/hosted verification, independent recertification, a four-platform non-publishing native build, accepted/stapled macOS notarization on both architectures, and real-app manual verification
  • final release-fix PR 87 exact head 006030c2b6dc1b936d30274228f1c65e626ec568 passed hosted CI run 29975290967; its ordinary squash merge tree is identical to reviewed main commit 640473ff3d1bbce9ec3cbb48b940cb46c99a3e03
  • the complete local repository gate passed: formatting, lint, typecheck, tests, and desktop production build
  • Scient evidence PR 47 pinned and verified the final owned desktop head without changing the upstream checkpoint

After this promotion merges, the release workflow will be dispatched in non-publishing mode from the exact release/stable head before any publication decision.

* fix provider status refresh invariants

* fix Claude auth recovery
* Use direct OAuth for Grok sign-in

* Expose safe Grok OAuth browser fallback
* Secure Scient state initialization

* Allow legacy migration state test

* fix(security): harden private state files

* test(security): lock private file boundaries

* fix(security): reject unsafe private file nodes
* Supervise the desktop backend lifecycle

* fix(desktop): preserve backend lifecycle ownership

* fix(desktop): replace semantically unready backends

* fix(desktop): close backend lifecycle races
* Supervise desktop connection recovery

* Isolate provider dialog browser fixtures

* fix(desktop): bind activation readiness generation

* fix(web): enforce single-owner connection recovery

* style(web): format connection recovery

* fix(web): satisfy connection transport types

* fix(web): harden stream and terminal recovery

* fix(web): fail closed on stuck stream cancellation

* fix(web): preserve terminal recovery ordering

* fix(web): clamp reconnect jitter ceilings

* fix(desktop): preserve connection wake after restack
* Define safe RPC recovery policies

* test(web): cover RPC recovery integration

* fix(web): recover after uncertain mutation failures

* test(web): type RPC recovery harness precisely

* fix(web): recover a failed replay generation
* Surface connection recovery diagnostics

* test(web): cover connection recovery experience

* style(web): format recovery browser coverage

* fix(web): keep recovery diagnostics current
* fix: recover Codex sessions after auth loss

* fix(codex): gate auth recovery by provider mode

* fix: harden Codex authentication recovery
* Secure Scient state initialization

* Allow legacy migration state test

* Supervise the desktop backend lifecycle

* Supervise desktop connection recovery

* Define safe RPC recovery policies

* Surface connection recovery diagnostics

* Support Linux desktop development launch

* Isolate provider dialog browser fixtures

* fix(desktop): fail closed on unsafe Linux sandbox

* style(desktop): format Linux launcher hardening

* fix(release): preserve AppImage sandbox

* revert(release): keep AppImage migration out of launcher hardening

* fix(desktop): honor Linux user namespace sandbox
* Fix Antigravity browser authentication

* Harden Antigravity authentication lifecycle

* Close Antigravity code window deterministically

* Keep Antigravity code submission cancellable
* Fix trusted Antigravity install and update routing

* Fix Antigravity browser authentication and models

* Refine provider connection dialog actions

* Harden managed provider update recovery
* Stabilize macOS release identity

* Reduce unintended macOS permission prompts

* Apply repository formatting
* feat(web): harden bidirectional chat rendering

* fix(web): close bidi review gaps
* Add project source dialog

* Harden project source cloning
* Add T3-style right dock surfaces

* Fix right dock test formatting
* Add message-level conversation forks

* Stabilize hosted fork browser test

* Close message fork boundary gaps

* Close final fork review gaps

* Resolve final fork recertification blockers

* Avoid replaying completed fork bootstrap

* Harden fork lineage and restart recovery

* Stabilize cold browser geometry startup

* Repair legacy fork title families

* Preserve unrecorded fork rename boundaries

* Clear drifted fork title lineage
* Increase default base font size to 15px

* Fix manual font size editing

* Preserve external font setting updates
* Use recommended provider model defaults

* Apply repository formatting

* Update browser expectation for Codex default

* Preserve explicit drafts before model discovery

* Respect live provider model availability
* Fix release candidate regressions

* Fix long transcript fork validation
* fix(release): preserve Linux sandbox

* test(release): resolve nested builder package

* test(release): follow Bun package symlinks
@github-actions github-actions Bot added size:XXL vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. labels Jul 23, 2026
@yaacovcorcos
yaacovcorcos merged commit a90aced into release/stable Jul 23, 2026
8 checks passed
@yaacovcorcos
yaacovcorcos deleted the codex/promote-v0.5.11 branch July 23, 2026 03:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XXL vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant