Diego Rodrigues de Sa e Souza 9dc6500ebd fix(release): attach the SBOM to the GitHub Release on dispatch publishes too (#12020) ...

The step was gated on github.event_name == 'release'. v3.8.50's package shipped
through a workflow_dispatch (the staged publish, 11 attempts) and the step was
skipped, so the GitHub Release carried no SBOM — it was attached by hand from the
run's sbom-npm artifact (5.0 MB, 1,886 components). Now it attaches on release or
workflow_dispatch whenever a release for the published tag exists, and says so
when it does not (the workflow artifact remains the durable copy either way).

actionlint and prettier clean; npm-publish-artifact-provenance and
check-workflows-provenance-runner suites pass.

2026-08-29 10:02:51 -03:00

..

build.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

ci.yml

fix(ci): stop a stalled Codecov upload from cancelling the Coverage job and the main run (main twin of #11972) (#11978)

2026-08-29 06:47:17 -03:00

claude.yml

Release v3.8.30 (#4267)

2026-06-20 07:09:43 -03:00

codeql.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

dast-smoke.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

deploy-vps.yml

Release v3.8.13 (#3327)

2026-06-06 19:13:11 -03:00

docker-publish.yml

fix(docker): let the bun digest artifact be absent, not fatal (#11740)

2026-08-27 00:41:09 -03:00

electron-release.yml

fix(release): resync the electron lockfile and let a dispatch build from a repaired ref (#11982)

2026-08-29 09:05:34 -03:00

lock-released-branch.yml

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

mutation-redundancy.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-compat.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-llm-security.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-mutation.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-property.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-release-green.yml

fix(ci): cap heavy builds at two runners with the omni-build label (#11932)

2026-08-28 17:19:45 -03:00

nightly-resilience.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-schemathesis.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

npm-publish.yml

fix(release): attach the SBOM to the GitHub Release on dispatch publishes too (#12020)

2026-08-29 10:02:51 -03:00

opencode-plugin-ci.yml

Release v3.8.50

2026-08-26 14:25:01 -03:00

opencode-provider-ci.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

quality.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

radar-export.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

scorecard.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

semgrep.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

wiki-sync.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00