diegosouzapw 529e4415c5 chore(release): sync main into release/v3.8.51 — the five post-release pipeline fixes ...

Brings e4683cd22d (#11867 Alibaba allowlist time bomb), 09de69edc7 (#11891
config expiry detector), e71be03398 (#11893 runner janitor), 9dc8eab70e
(#11895 provenance × self-hosted lint) and f564b64f7d (#11901 heavy-build
lanes). main is already an ancestor of this branch (v3.8.50 sync-back), so the
merge is exactly these five commits.

# Conflicts:
#	tests/unit/alibaba-free-tier-allowlist.test.ts

2026-08-28 15:49:53 -03:00

..

lib

feat(quality): fail check:workflows on --provenance from a self-hosted runner (#11895)

2026-08-28 15:44:40 -03:00

audit-sqlite-coupling.mjs

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

audit-sqlite-coupling.test.mjs

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

check-api-docs-refs.mjs

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

check-build-scope.mjs

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

check-bundle-size.mjs

fix(release): post-merge quality gates to main for v3.8.26 (#3964)

2026-06-16 02:33:19 -03:00

check-changelog-integrity.mjs

Release v3.8.50

2026-08-26 14:25:01 -03:00

check-circular-deps.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-cli-i18n.mjs

Release v3.8.50

2026-08-26 14:25:01 -03:00

check-codeql-ratchet.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-cognitive-complexity.mjs

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

check-complexity-ratchets.mjs

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

check-complexity.mjs

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

check-compression-budget.ts

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

check-cycles.mjs

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

check-dashboard-typecheck.mjs

Add cliproxy provider exposure controls and manifest injection (#7329)

2026-07-17 03:04:00 -03:00

check-db-rules.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-dead-code.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-deprecated-versions.mjs

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

check-deps.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-doc-links.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-docs-counts-sync.mjs

fix(docs): Auto-Combo factor count is read from DEFAULT_WEIGHTS (#11545)

2026-08-25 16:30:49 -03:00

check-docs-symbols.mjs

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

check-docs-sync.mjs

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

check-duplication.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-env-doc-sync.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-error-helper.mjs

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

check-fabricated-docs.mjs

Release v3.8.50

2026-08-26 14:25:01 -03:00

check-fetch-targets.mjs

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-file-size.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-forgotten-sibling-tests.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-install-upgrade.mjs

chore(release): bring main's post-tag fixes into release/v3.8.51 — sync-back step 2/2

2026-08-28 14:21:44 -03:00

check-known-symbols.ts

fix(check): await the now-async getExecutor in the known-symbols gate (#11421) (#11582)

2026-08-26 08:10:24 -03:00

check-licenses.mjs

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

check-lockfile.mjs

fix(ci): detect stale workspace lockfile entries (#11714)

2026-08-28 11:14:55 -03:00

check-migration-numbering.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-model-lifecycle.mjs

fix(autoCombo,sse): catalog hygiene — retire dead FITNESS_TABLE rows, fix 7 BUILT_IN_ALIASES targets, add model-lifecycle gate (#11503) (#11507)

2026-08-25 13:52:23 -03:00

check-mutation-ratchet.mjs

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

check-mutation-test-coverage.mjs

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

check-nvidia-catalog-drift.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

check-open-sse-typecheck.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-openapi-breaking.mjs

Release v3.8.35 (#4743)

2026-06-23 17:06:18 -03:00

check-openapi-coverage.mjs

fix(build): v3.8.48 hotfix — npm tarball head-response-guard (#7065), electron win spawn, Sonar gate zeroed (#7055)

2026-07-13 18:18:54 -03:00

check-openapi-routes.mjs

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

check-openapi-security-tiers.mjs

Release v3.8.35 (#4743)

2026-06-23 17:06:18 -03:00

check-pack-boot.mjs

Release v3.8.50

2026-08-26 14:25:01 -03:00

check-pr-evidence.mjs

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

check-pr-self-target.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-pr-test-policy.mjs

fix(deps): bump undici to 7.28.0 and dompurify to 3.4.11 (security) (#4304)

2026-06-19 18:27:04 -03:00

check-provider-asset-provenance.mjs

chore(quality): gate provider asset provenance (#11743)

2026-08-28 04:39:35 -03:00

check-provider-assets.mjs

Release v3.8.33 (#4515)

2026-06-22 03:17:02 -03:00

check-provider-consistency.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

check-public-creds.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-route-guard-membership.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

check-route-validation.mjs

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

check-router-eval-regression.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

check-rtl-ratchet.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-secrets.mjs

fix(release): post-merge quality gates to main for v3.8.26 (#3964)

2026-06-16 02:33:19 -03:00

check-supported-node-runtime.ts

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-t11-any-budget.mjs

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

check-test-discovery.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-test-masking.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-test-runner-api.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-tracked-artifacts.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-ts7-diagnostics-ratchet.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

check-type-coverage.mjs

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

check-vuln-ratchet.mjs

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

check-workflows.mjs

feat(quality): fail check:workflows on --provenance from a self-hosted runner (#11895)

2026-08-28 15:44:40 -03:00

complexityEslintReport.mjs

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

compression-budget-baseline.json

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

omniroute-verify.mjs

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

test-report-summary.mjs

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00