v8.164.0-rc.62

Added

• (ci) Expose output from successful job steps in #3225 by @teemow
• (nancy) Scan locally with keychain credentials in #3240 by @teemow

Fixed

• (ci-webhooks) Honor command cancellation in #3318 by @teemow
• (repo status) Return text output errors in #3320 by @teemow
• (repo status) Preserve the command context in #3321 by @teemow
• (reservation list) Report empty output errors in #3325 by @teemow
• (reservation list) Honor command cancellation in #3322 by @teemow
• (reservation) Quote checkout paths in recovery commands in #3340 by @teemow
• (repo status) Report the branch kept by reconciliation in #3323 by @teemow
• (repo list) Preserve the command context in #3326 by @teemow
• (reservation) Detect push failures in joined sweep errors in #3339 by @teemow
• (repo) Preserve manager JSON numbers in #3347 by @teemow
• (repo) Label committed alignment opt-ins correctly in #3349 by @teemow
• (repo get) Preserve the command context in #3287 by @teemow
• (repo info) Return text output errors in #3288 by @teemow
• (gen) Disable cgo in the generated install target in #3266 by @teemow
• (pr) Require complete readable checks before bulk approval in #3146 by @teemow
• (pr) Bind bulk writes to the checked head in #3163 by @teemow
• (gen workflows) Write CHANGELOG.md at release, not in pull requests in #3577 by @teemow
• (circleci) Read every workflow page in #3293 by @teemow
• (authstore) Lock shared file transactions in #3557 by @teemow
• (pr wait) Settle the head before returning a verdict in #3034 by @teemow
• (auth) Report persisted identities after login failures in #3045 by @teemow
• (auth exec) Preserve the command context during refresh in #3049 by @teemow
• (auth) Bound the entire manager sign-in in #3054 by @teemow
• (pr rerun) Refuse fork webhook recovery in #3193 by @teemow
• (release archive) Normalize accepted version spellings in #3212 by @teemow
• (release create) Honor cancellation before generation in #3228 by @teemow
• (release create) Reject unsupported output formats in #3233 by @teemow
• (reservation) Preserve ignored files during checkout sync in #3337 by @teemow
• (authexec) Skip forwarding shims for the person's login in #3450 by @teemow
• (authexec) Match App owners without case sensitivity in #3473 by @teemow
• (authexec) Honor explicit gh default repositories in #3563 by @teemow
• (release wait) Select the same GitHub login as pr wait in #3041 by @teemow
• (prwait) Ignore cancellations superseded by later jobs in #3048 by @teemow
• (pr merge) Explain a confirmed review bypass in #3044 by @teemow
• (auth login) Decode structured manager consent URLs in #3057 by @teemow
• (auth login) Honor command cancellation in #3075 by @teemow
• (reposetup) Retry muster's retryable interruption in #3056 by @teemow
• (pr) Wait for CircleCI using GitHub statuses in #3051 by @teemow
• (reposetup) Keep empty chart value maps open in #3061 by @teemow
• (reposetup) Let customers opt into baseline protection in #3070 by @teemow
• (deploy) Preserve parsed wait timeouts in #3084 by @teemow
• (release promote) Bound dry-run network retries in #3085 by @teemow
• (prmerge) Refuse unclassified fork merge defaults in #3087 by @teemow
• (deploy) Renew the App login during API calls in #3094 by @teemow
• (release promote) Refuse unversioned upgrade notes in #3100 by @teemow
• (release wait) Retain probe errors at timeout in #3109 by @teemow
• (auth) Validate CircleCI tokens in auth status in #3252 by @teemow
• (authexec) Keep global gh search on the App login in #3571 by @teemow
• (gen makefile) Remove obsolete generated includes in #3124 by @teemow
• (reconcile) Tolerate forbidden protection reads in dry runs in #3142 by @teemow
• (pr) Keep repository identity in Renovate batches in #3140 by @teemow
• (rollout wait) Wait for GitOps selectors to catch up in #3152 by @teemow
• (reconcile) Explain Renovate's fork check in #3156 by @teemow
• (gen precommit) Align local hooks and preserve provenance in #3164 by @teemow
• (prwait) Settle halted CircleCI setup pipelines in #3166 by @teemow
• (gen circleci) Add custom chart-test dependencies in #3177 by @teemow
• (pr) Require the callers effective Renovate approval in #3172 by @teemow
• (cli) Keep waits alive after terminal hangup in #3183 by @teemow
• (release wait) Keep the deadline out of probe errors in #3580 by @teemow
• (release wait) Warn about unchecked custom images in #3178 by @teemow
• (pr) Count Renovate merge failures in the summary in #3207 by @teemow
• (pr) Preserve detached outcomes when output fails in #3192 by @teemow
• (pr merge) Serialize detached merge startup in #3194 by @teemow
• (repo create) Validate dry runs through the manager in #3191 by @teemow
• (pr) Join Renovate discovery before normal completion in #3224 by @teemow
• (pr) Skip CircleCI waits for projects with no pipelines in #3229 by @teemow
• (prwait) Read public logs and explain missing continuations in #3256 by @teemow
• (authexec) Keep comment text out of login selection in #3550 by @teemow
• (pr) Renew the App login during Renovate batches in #3215 by @teemow
• (release rerun) Reject an empty tag before recovery in #3220 by @teemow
• (approvealign) Use complete current review verdicts in #3205 by @teemow
• (release) Stop waiting on empty settled tag pipelines in #3518 by @teemow
• (version check) Honor caller cancellation in #3453 by @teemow
• (deploy) Honor command cancellation in #3090 by @teemow
• (authstore) Reject null keyring documents in #3569 by @teemow
• (pr) Report status flag errors with the status schema in #3232 by @teemow
• (approvealign) Reject non-file team declarations in #3244 by @teemow
• (approvealign) Report planned actions accurately in #3248 by @teemow
• (approvealign) Count approved auto-merge queues in #3251 by @teemow
• (reservation list) Reject state absent from main in #3316 by @teemow
• (reservation) Preserve edits during dry-run cleanup in #3338 by @teemow
• (authexec) Select the login for explicit gh targets in #3555 by @teemow
• (approvealign) Verify Align titles before approval in #3236 by @teemow
• (rollout) Wait for child HelmRelease retries to settle in #3364 by @teemow
• (pr merge) Skip release waits on excluded branches in #3508 by @teemow
• (rollout) Bound cluster operations by the rollout timeout in #3362 by @teemow
• (prwait) Wait for draft pull request checks in #3373 by @teemow
• (rollout) Report settled failures of changed values in #3366 by @teemow
• (gen precommit) Retain options in schema recovery advice in #3375 by @teemow
• (updater) Merge assets from the latest release response in #3381 by @teemow
• (reservation) Preserve untracked component files in #3379 by @teemow
• (reservation) Verify the complete rendered dev selector in #3386 by @teemow
• (reservation) Reap with an unreachable optional keychain in #3416 by @teemow
• (rollout) Validate HelmRelease selectors before tooling in #3368 by @teemow
• (pr merge) Classify exhausted reads as transient in #3377 by @teemow
• (reservation) Return reap output failures with sweep errors in #3419 by @teemow
• (updater) Report actual install outcomes and refresh cache in #3445 by @teemow
• (nocredentials) Block registry credential fallbacks in #3468 by @teemow
• (authstore) Serialize muster token refreshes in #3477 by @teemow
• (authstore) Discover issuers with path components in #3546 by @teemow
• (reservation) Stop reap after a refused dirty reset in #3406 by @teemow
• (reservation) Protect user files before releasing components in #3422 by @teemow
• (gen circleci) Scaffold missing ATS configuration in #3507 by @teemow
• (repo) Expose owning team without administration reads in #3374 by @teemow
• (approvealign) Observe accepted branch updates in #3230 by @teemow
• (release wait) Probe artifacts before reporting failed CI in #3206 by @teemow
• (release wait) Await the tag's pipeline and assets in #3187 by @teemow
• (pr) Stop bulk work on command cancellation in #3213 by @teemow
• (cli) Report interrupted waits with their documents in #3249 by @teemow
• (updater) Read release pages within a lookup deadline in #3433 by @teemow
• (reservation) Hold exclusive ownership of each checkout in #3341 by @teemow
• (pr) Detect deduplicated push redeliveries in #3237 by @teemow
• (prmerge) Refuse unsquashed autosquash commits in #3141 by @teemow
• (release) Mark failed tag publishes and list recorded failures in #3246 by @teemow
• (chart) Derive serve egress from installations in #3050 by @teemow
• (cmd) Reject unknown subcommands of non-runnable groups in #3059 by @teemow
• (ci job) Validate job numbers before dependencies in #3060 by @teemow
• (cmd) Validate log levels during flag parsing in #3065 by @teemow
• (completion) Honor the configured output writer in #3076 by @teemow
• (prwait) Allow full failed job logs in #3245 by @teemow
• (rollout) Report failures of already applied revisions in #3370 by @teemow
• (reservation) Protect untracked paths during push retry in #3385 by @teemow
• (approvealign) Expose PR and review read errors in #3387 by @teemow
• (authstore) Bind muster refreshes to their issuer in #3562 by @teemow
• (repo approve) Honor command cancellation in #3257 by @teemow
• (repo approve) Propagate text output failures in #3258 by @teemow
• (gen makefile) Resolve worktree versions with local tags in #3261 by @teemow
• (repo checks) Preserve command cancellation in #3274 by @teemow
• (repo checks) Preserve classic protection settings in #3276 by @teemow
• (repo get) Return text output errors in #3286 by @teemow
• (repo info) Preserve the command context in #3289 by @teemow
• (circleci) Wait for failing workflows to settle in #3294 by @teemow
• (circleci) Attribute image builds to checkout tags in #3295 by @teemow
• (repo) Refresh muster tokens between manager calls in #3348 by @teemow
• (authexec) Respect Windows environment key casing in #3566 by @teemow
• (gen workflows) GitHub Releases are the changelog in #3579 by @teemow
• (wait) Recover CircleCI reads after login renewal in #3260 by @teemow
• (release wait) Allow bounded catalog Pages publication lag in #3384 by @teemow
• (circleci) Keep cancellations out of remote_error in #3585 by @teemow

Full Changelog: v8.163.1...v8.164.0-rc.62