ci(release): harden core-release workflow (fixes from 1.47.10) - #14039

Merged

christian-byrne merged 25 commits into

mainfrom

ci__harden-core-release

Aug 20, 2026

Commits on Aug 9, 2026

ci(release): harden core-release workflow (fixes from 1.47.10)

authored and
Connor Byrne
committed
82aa0b4
ci(release): guard command substitutions in release-done job

authored and
Connor Byrne
committed
77db22a
ci(release): add curl timeouts in release-done job

authored and
Connor Byrne
committed
363c424
ci(release): keep Latest correct and stop premature pin PRs
Connor Byrne
committed
8492f85
ci(release): address review on the Latest and PyPI-wait steps
Connor Byrne
committed
f17db6c
ci(release): bound the PyPI wait by wall clock, not attempt count
Connor Byrne
committed
7388de0
ci(release): require strict semver before picking the Latest release
Connor Byrne
committed
6e3cc75
ci(release): stop the tag timeout from asserting the bump PR is unmerged
Connor Byrne
committed
61a356d
ci(release): record Latest-restoration failures instead of swallowing them
Connor Byrne
committed
6431d20
ci(release): drop the Latest restoration, superseded on main
Connor Byrne
committed
1ebaa00
Merge branch 'main' into ci__harden-core-release
christian-byrne
authored
99d650d
ci: invoke release-enforce-latest synchronously from release-draft-create
claude
committed
996b12e
Merge branch 'main' into ci__harden-core-release
christian-byrne
authored
e6dc39d

Commits on Aug 10, 2026

ci: fix action pin version mismatch blocking validate-pins
claude
committed
1b11b34

Commits on Aug 17, 2026

Commits on Aug 18, 2026

Merge branch 'main' into ci__harden-core-release
DrJKL
authored
0f2021a
ci: simplify release safeguards

DrJKL
and
ampagent
committed
bc11798
fix(release): use PR_GH_TOKEN and harden release scripts per CodeRabbit review
claude
committed
c54d805
fix(release): pass PR_GH_TOKEN explicitly through the enforce_latest reusable workflow
claude
committed
816ad9f
[automated] Apply ESLint and Oxfmt fixes
actions-user
committed
84ab31e