Skip to content

v2.9.0

Choose a tag to compare

View all tags
@asphyx0r asphyx0r released this 06 Sep 16:06
· 42 commits to main since this release
v2.9.0
64d7a91
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v2.9.0

This release adds guarded squash merges and aligns release publication with
protected branches, exact commit-message validation, and sealed package assets.

Highlights

  • Validate the exact squash message with Commitlint before privileged merging.
  • Read the auto-merge policy with the workflow's read-only token and fail closed
    when the policy cannot be verified.
  • Prepare release changes through separate guarded pull requests and verify the
    resulting commit, tree, and message.
  • Audit a dedicated preflight ref before tagging, then verify the sealed package
    assets before stable release promotion.

Changes

Reference Date Description Author(s)
e2149b0 2026-09-06 fix(release): align protected release workflow asphyx
1aa74bb 2026-09-06 fix(git): read guard policy with read-only tokens asphyx
021c0b9 2026-09-06 fix(git): guard squash merge messages asphyx
Assets 5
Loading