Conversation
Bumps the python-dependencies group with 1 update: [python-dotenv](https://github.com/theskumar/python-dotenv). Updates `python-dotenv` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the npm-dependencies group in /app/frontend with 2 updates: [@tsconfig/node24](https://github.com/tsconfig/bases/tree/HEAD/bases) and [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc). Updates `@tsconfig/node24` from 24.0.4 to 24.0.5 - [Commits](https://github.com/tsconfig/bases/commits/HEAD/bases) Updates `vue-tsc` from 3.3.9 to 3.3.10 - [Release notes](https://github.com/vuejs/language-tools/releases) - [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/language-tools/commits/v3.3.10/packages/tsc) --- updated-dependencies: - dependency-name: "@tsconfig/node24" dependency-version: 24.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: vue-tsc dependency-version: 3.3.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
…ependencies-eb533c92bf chore(deps): bump python-dotenv from 1.2.2 to 1.2.3 in the python-dependencies group
…ntend/develop/npm-dependencies-e141f69f74 chore(deps): bump the npm-dependencies group in /app/frontend with 2 updates
Make stable publication fail closed on Trivy findings, bind release jobs to protected environments, and correct the published architecture claim. Add an executable workflow contract covering these boundaries. Closes #802
fix(ci): harden release governance
Remove the build-only pip distribution and its embedded vendor SBOM from the final image. Normalize public runtime binary and library permissions for the non-root appuser and protect both invariants with mutation-resistant Dockerfile contract tests.\n\nCloses #804
Reject appended replacement stages that could reintroduce pip or override the non-root runtime user.\n\nRefs #804
fix(container): harden runtime image
fix(recording): prevent orphaned rotation processes
…ator feat(twitch): coordinate persistent upstream leases
Owner
Author
|
Promotion PR #809 is blocked by the independent exact-head technical gate for Reproducible in-scope P1 findings:
The gate passed 64 focused tests, Ruff, diff hygiene and compilation, but those checks do not cover these two reproduced acceptance failures.
|
fix(twitch): fence recovery and join live starts
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Promotion of verified Issue #783 integration from
developtomain.Immutable candidate head:
969d87826b39cb004da2de723462a6d64c2dd326.Immutable main base:
5cba015cf5b741040c8f2b4ea45a67dc755fad42.Source PR #808 and bounded P1 remediation PR #810 were merged to
develop. Fresh current-head CodeQL, Tests, Security Scanning, Docker Build Test, and Release & Docker Build checks completed successfully for the immutable candidate.This Draft requires fresh detached exact-head technical gate
t_e9801575, security gatet_117ddc3c, and explicit Max authorization before merge tomain.