diegosouzapw b30000607b ci(quality): unblock v3.8.27 release gates (zizmor pin + test-masking allowlist) ...

- zizmor ratchet (151→139, no regression): SHA-pin every action ref ADDED this
  cycle — codeql/dast-smoke/semgrep (3 new workflows) + trivy-action (docker-publish)
  + actions/cache (nightly-mutation). Pre-existing tag refs keep the repo convention.
- test-masking: add config/quality/test-masking-allowlist.json + allowlist support in
  check-test-masking.mjs (exempts ONLY the net-assert-reduction signal; tautology/skip/
  deletion still fire). Allowlists 2 verified-legitimate reductions:
  appearance-widget-settings-schema (#4033 removed showTokenSaverOnEndpoint field) and
  dashboard-shell-tabs (#3973 tabs→redirect refactor, asserts replaced). +4 gate tests.

2026-06-17 00:42:20 -03:00

..

lib

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-bundle-size.mjs

fix(release): post-merge quality gates to main for v3.8.26 (#3964)

2026-06-16 02:33:19 -03:00

check-circular-deps.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-cli-i18n.mjs

feat(cli): fase 8.3 — i18n completude e linter check-cli-i18n

2026-05-15 03:52:13 -03:00

check-codeql-ratchet.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-cognitive-complexity.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-complexity.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-cycles.mjs

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

check-db-rules.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-dead-code.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-deprecated-versions.mjs

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

check-deps.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-doc-links.mjs

feat(check): add doc-links checker for internal markdown references

2026-05-13 19:19:28 -03:00

check-docs-counts-sync.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-docs-symbols.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-docs-sync.mjs

docs(cli): remove duplicate docs/CLI-TOOLS.md + lint anti-regression

2026-05-14 20:27:40 -03:00

check-duplication.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-env-doc-sync.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-error-helper.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-fabricated-docs.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-fetch-targets.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-file-size.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-known-symbols.ts

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-licenses.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-lockfile.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-migration-numbering.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-openapi-breaking.mjs

feat(ci): Quality Gate v2 — Onda 0 + Onda 1 (gate flips, TIA, SAST, DAST-smoke, mutation infra) (#4016)

2026-06-16 17:27:36 -03:00

check-openapi-coverage.mjs

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

check-openapi-routes.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-openapi-security-tiers.mjs

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

check-pr-evidence.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-pr-test-policy.mjs

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

check-provider-consistency.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-public-creds.mjs

feat(compression): compression engines + async pipeline + Compression Studios (#3848)

2026-06-14 10:45:22 -03:00

check-route-guard-membership.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-route-validation.mjs

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

check-secrets.mjs

fix(release): post-merge quality gates to main for v3.8.26 (#3964)

2026-06-16 02:33:19 -03:00

check-supported-node-runtime.ts

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

check-t11-any-budget.mjs

fix(ci): raise t11 any-budget for cursor.ts (false-positive) + server.ts (dynamic tools)

2026-06-03 20:31:34 -03:00

check-test-discovery.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-test-masking.mjs

ci(quality): unblock v3.8.27 release gates (zizmor pin + test-masking allowlist)

2026-06-17 00:42:20 -03:00

check-tracked-artifacts.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-type-coverage.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-vuln-ratchet.mjs

ci(quality): flip require-tighten + osv + Trivy to blocking (v3.8.27 cycle-end) (#3984)

2026-06-16 09:13:38 -03:00

check-workflows.mjs

fix(release): post-merge quality gates to main for v3.8.26 (#3964)

2026-06-16 02:33:19 -03:00

test-report-summary.mjs

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00