switchboard/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Releases 9 Wiki Activity

Feat v0.6.6 final hardening #41

Merged
xcaliber merged 2 commits from feat/v0.6.6-final-hardening into main 2026-03-31 17:40:40 +00:00
Conversation 0 Commits 2 Files Changed 19 +625 -131
xcaliber commented 2026-03-31 17:25:08 +00:00
Owner
Copy Link
No description provided.
xcaliber added 1 commit 2026-03-31 17:25:08 +00:00
Feat v0.6.6 final hardening
Some checks failed
CI/CD / detect-changes (pull_request) Successful in 4s
Details
CI/CD / test-frontend (pull_request) Successful in 6s
Details
CI/CD / test-go-pg (pull_request) Failing after 2m41s
Details
CI/CD / test-sqlite (pull_request) Failing after 2m48s
Details
CI/CD / build-and-deploy (pull_request) Has been skipped
Details
77ef5b43d9 
Final pass before public release — security, correctness, developer experience.

- ValidateManifest() gate: centralized manifest validation (12 unit tests)
- Extension dependency auto-activation from bundled packages
- OIDC nonce validation: ID token nonce checked against stored state
- Schema migration stub replaced with log-only additive policy
- OptionalAuth middleware for anonymous workflow visitor routes
- Package signing schema reservation (signature field + env var)
- PublishAsync event bus counter fix
- Health UI tooltips explaining published vs delivered gap
- ICD/SDK runner updated for v0.6.x endpoints (metrics, cluster, backups, OpenAPI)
- Version bump, ROADMAP, CHANGELOG

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
xcaliber added 1 commit 2026-03-31 17:36:20 +00:00
Fix CI: test manifests need tools/pipes/hooks for extension type
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 4s
Details
CI/CD / test-frontend (pull_request) Successful in 6s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m46s
Details
CI/CD / test-go-pg (pull_request) Successful in 2m47s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m21s
Details
f4e66afc80 
ValidateManifest() now enforces type-specific constraints on bundled
install too. Two tests used type "extension" without any tools/pipes/hooks,
which is correctly rejected. Added hooks field to make them valid.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
xcaliber merged commit 7915d84c8b into main 2026-03-31 17:40:40 +00:00
xcaliber deleted branch feat/v0.6.6-final-hardening 2026-03-31 17:40:41 +00:00
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
xcaliber
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: switchboard/core#41
Delete Branch "feat/v0.6.6-final-hardening"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?