Files
OmniRoute/scripts
diegosouzapw 9656084454 fix(ci): release-green pack gate must check provenance against the branch it validates
The 'Package artifact (npm pack policy)' base-red on release/v3.8.51 was a
false red, and 'Tarball boot-smoke' was its cascade (it is recorded as failed
whenever pack-artifact does not exit 0).

validate-pack-artifact.ts checks dist/BUILD_SHA for ancestry against
OMNIROUTE_RELEASE_REF, defaulting to origin/main. That default is correct at
publication (npm-publish.yml runs on main) but structurally impossible in
validate-release-green.mjs, which runs ON the release branch: mid-cycle its
tip is by definition not an ancestor of main, so the guard returned
off-release-line on every run.

Verified directly against the release tip d6f3150:

  ref=origin/main  ok=false  reason=off-release-line
  ref=HEAD         ok=true   reason=on-release-line

ci.yml already solves the same class for pull_request by pointing the ref at
the head under test; the checkable invariant here is identical - the stamp
matches the tree just validated - so the gate now runs with
OMNIROUTE_RELEASE_REF=HEAD.

The guard is not relaxed: a dist/ built from another commit still fails, and
a missing BUILD_SHA still fails. The parallel slow-gate runner also had to
forward each gate's env, which it previously dropped.

Refs #12732
2026-09-07 10:58:51 -03:00
..
2026-06-19 06:49:01 -03:00
2026-06-23 17:06:18 -03:00
2026-07-29 15:18:55 -03:00
2026-06-27 09:07:12 -03:00
2026-07-13 09:12:40 -03:00
2026-07-29 15:18:55 -03:00
2026-07-13 09:12:40 -03:00