Repository navigation
Merged Pull Requests
- Adopt research-repo-tools v0.2.8 and parallelize native CI #343
- Enforce release state invariants and macro hygiene #342
- Resume and reuse verified release benchmark acquisitions #335
- Separate benchmark timing from routine CI #334
- Bump the github-actions group with 5 updates #332
Added
feat: resume and reuse verified release benchmark acquisitions
-
Adopt declared API availability and shared progress while retaining the full
scientific workload catalog and paired LU peer context. -
Add explicit checkpoint recovery and independent owner records so reports,
README publication, and release archives reuse the original acquisition. -
Require owner-selected candidate evidence before tagging and preserve its
full acceptance across hosted attachment and Cargo deployment approval. -
Allow explicitly reviewed native-CI renewal without replacing immutable
benchmark assets, and keep README outside current compiler inputs. -
Pin research-repo-tools at 055353c630604b1ae3438c1eaf534ba85e067a7e for
downstream rehearsal while enforcing published tooling at release gates. -
Automate release evidence reuse and parallelize CI
4f57700- Discover the original acquisition owner and authenticated tag-push draft
receipt automatically while retaining explicit recovery inputs. - Align release commands and documentation around pre-tag evidence review,
automatic draft preparation, and retained-evidence publication dispatch. - Require an existing reviewed acceptance before tagging, staging, or
publishing, and preserve exact release and artifact identities on retries. - Overlap independent Rust and Python validation after policy checks, retain
a serial fallback, and cache managed Cargo compilation separately from
verified tool installations. - Adopt research-repo-tools at the authorized cd8594f development revision.
- Discover the original acquisition owner and authenticated tag-push draft
Changed
-
Separate benchmark timing from routine CI #334
f520e2f- Run full exact Criterion timing on demand and retain untimed benchmark
validation in routine CI. - Use research-repo-tools v0.2.6 for setup, Semgrep fixtures, and release
tooling, and remove the temporary scanner adapter. - Refresh the managed tools and dependency locks while retaining the
Intel macOS Semgrep wheel.
- Run full exact Criterion timing on demand and retain untimed benchmark
Dependencies
chore(deps): bump the github-actions group with 5 updates
Bumps the github-actions group with 5 updates:
| Package | From | To |
|---|---|---|
| github/codeql-action/upload-sarif | 4.39.0 |
4.39.1 |
| astral-sh/setup-uv | 10.3.0 |
10.3.2 |
| github/codeql-action/init | 4.39.0 |
4.39.1 |
| github/codeql-action/analyze | 4.39.0 |
4.39.1 |
| rust-lang/crates-io-auth-action | 1.0.5 |
1.0.6 |
Updates github/codeql-action/upload-sarif from 4.39.0 to 4.39.1
Updates astral-sh/setup-uv from 10.3.0 to 10.3.2
Updates github/codeql-action/init from 4.39.0 to 4.39.1
Updates github/codeql-action/analyze from 4.39.0 to 4.39.1
Updates rust-lang/crates-io-auth-action from 1.0.5 to 1.0.6
-
Bump the github-actions group with 2 updates
3323040Bumps the github-actions group with 2 updates: actions-rust-lang/setup-rust-toolchain and
astral-sh/setup-uv.Updates
actions-rust-lang/setup-rust-toolchainfrom 2.0.0 to 2.0.1Updates
astral-sh/setup-uvfrom 10.3.2 to 10.3.3
Documentation
-
Assign release validation to the release tracker
6cb4fbc- Close the completed release-flow and validation-graph implementation issues
on merge and keep remaining release validation and readiness under #333.
- Close the completed release-flow and validation-graph implementation issues
-
Add runnable examples and link interval proofs
647184f- Show provisional column selection, interval solution enclosures and
fallback, and exact rational objective evaluation in runnable examples. - Link interval and rounding rustdoc to the scientific references and
proofs, and update the README link inventory. - Include the staged itoa 1.0.19 lockfile refresh.
- Show provisional column selection, interval solution enclosures and
Fixed
-
Avoid Windows actionlint deadlock in release preparation
6d77e15- Execute the draft writer from a runner-owned script through isolated Python,
preserving the exact tag, attempt, artifact and draft identity checks. - Parse workflow scripts as Bash only for the applicable shell steps while
retaining managed Zizmor execution enforcement. - Document automatic owner-record transfer selection and the completed
workstream handoff to the release-validation tracker. - Refresh the locked bracex dependency to 3.2.2.
- Execute the draft writer from a runner-owned script through isolated Python,
-
Authenticate tool setup and allow Zizmor cleanup
261bee3- Use the job token for managed binary release lookups so cold setup
can finish when the anonymous GitHub API quota is exhausted. - Give Zizmor 45 minutes for cold tool installation, scanning and cache
cleanup while preserving the existing findings gate.
- Use the job token for managed binary release lookups so cold setup
-
Enforce release state invariants and macro hygiene #342
88d2d25- Represent scaled determinant products with explicit empty, nonzero,
zero, and non-finite states while preserving arithmetic order. - Parse release handoffs into draft and publication variants with
validated asset identities and fixed local transport paths. - Reject mismatched handoffs and malformed owner digests before effects.
- Keep matrix dispatch error arms independent of caller-defined names.
- Consolidate Rust imports and shorten repeated implementation paths.
- Represent scaled determinant products with explicit empty, nonzero,
-
Adopt research-repo-tools v0.2.8 and parallelize native CI #343
be9277b
fix: unblock release provenance with research-repo-tools v0.2.8
- Adopt the published supplier in the manifest, lockfile, source policy,
isolated recipes, and release workflows; remove the development Git pin. - Prepare authenticated native dependency builds and require their
provenance in CI, signed release evidence, and publication workflows. - Delegate release runtime isolation to shared RRT APIs while preserving
consumer-owned benchmark acquisition and approval records. - Expose the shared dependency-source transition command and document
deliberate supplier adoption, pin-preserving updates, and release setup. - Refresh managed tool, GitHub Action, and Cargo dependency pins.