21 Commits

• chore(deps): bump actions/setup-node (#2204)

  Bumps the actions-minor-and-patch group with 1 update in the / directory: [actions/setup-node](https://github.com/actions/setup-node).
  
  
  Updates `actions/setup-node` from 6.3.0 to 6.4.0
  - [Release notes](https://github.com/actions/setup-node/releases)
  - [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)
  
  ---
  updated-dependencies:
  - dependency-name: actions/setup-node
    dependency-version: 6.4.0
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: actions-minor-and-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2026-06-10 23:39:00 -04:00
  d71ffd56b9
• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#2183)

  Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
  - [Release notes](https://github.com/actions/checkout/releases)
  - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)
  
  ---
  updated-dependencies:
  - dependency-name: actions/checkout
    dependency-version: 6.0.3
    dependency-type: direct:production
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2026-06-07 13:25:31 +08:00
  09e2bc58d3
• docs: define ECC 2.0 hypergrowth release lane

  Refresh the active 2.0 release surface for the affaan-m/ECC repo identity, update package/plugin/workflow launch metadata, and add an operator command center for release video, partner, sponsor, consulting, and social launch execution.

  Affaan Mustafa · 2026-05-19 05:42:38 -04:00
  9ee1e15564
• security: scope release oidc publishing
  Affaan Mustafa · 2026-05-18 13:41:10 -04:00
  7911af4a39
• feat: add platform and supply-chain audit commands (#1926)
  Affaan Mustafa · 2026-05-15 08:06:26 -04:00
  13585f1092
• ci: disable checkout credential persistence in privileged workflows (#1851)
  Affaan Mustafa · 2026-05-13 01:15:49 -04:00
  209abd403b
• ci: ignore install scripts in release workflows (#1839)
  Affaan Mustafa · 2026-05-12 21:36:36 -04:00
  33db548be3
• feat(ecc2): finalize rc1 release surface
  Affaan Mustafa · 2026-04-28 22:10:04 -04:00
  0a87323eda
• fix: wire npm auth into release publish
  Affaan Mustafa · 2026-04-14 20:43:22 -07:00
  b5c4d2beb9
• fix: publish npm releases and clarify install identifiers
  Affaan Mustafa · 2026-04-14 20:42:28 -07:00
  34380326c8
• Merge pull request #1370 from affaan-m/dependabot/github_actions/softprops/action-gh-release-3.0.0

  build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0

  Affaan Mustafa · 2026-04-13 00:30:59 -07:00
  5c4570baa5
• chore: update release action version comments
  Affaan Mustafa · 2026-04-12 23:54:26 -07:00
  db8247d701
• fix: harden release surface version and packaging sync (#1388)

  * fix: keep ecc release surfaces version-synced
  
  * fix: keep lockfile release version in sync
  
  * fix: remove release version drift from locks and tests
  
  * fix: keep root release metadata version-synced
  
  * fix: keep codex marketplace metadata version-synced
  
  * fix: gate release workflows on full metadata sync
  
  * fix: ship all versioned release metadata
  
  * fix: harden manual release path
  
  * fix: keep localized release docs version-synced
  
  * fix: sync install architecture version examples
  
  * test: cover shipped plugin metadata in npm pack
  
  * fix: verify final npm payload in release script
  
  * fix: ship opencode lockfile in npm package
  
  * docs: sync localized release highlights
  
  * fix: stabilize windows ci portability
  
  * fix: tighten release script version sync
  
  * fix: prefer repo-relative hook file paths
  
  * fix: make npm pack test shell-safe on windows

  Affaan Mustafa · 2026-04-12 22:33:32 -07:00
  28edd197c2
• build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0

  Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.6.1 to 3.0.0.
  - [Release notes](https://github.com/softprops/action-gh-release/releases)
  - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/softprops/action-gh-release/compare/153bb8e04406b158c6c84fc1615b65b24149a1fe...b4309332981a82ec1c5618f44dd2e27cc8bfbfda)
  
  ---
  updated-dependencies:
  - dependency-name: softprops/action-gh-release
    dependency-version: 3.0.0
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  dependabot[bot] · 2026-04-12 04:52:35 +00:00
  5ae63b301f
• ci: gate releases on opencode payload verification
  Affaan Mustafa · 2026-04-06 14:08:08 -07:00
  4967dad08c
• chore(deps): bump actions/checkout from 4.3.1 to 6.0.2 (#1060)

  Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2.
  - [Release notes](https://github.com/actions/checkout/releases)
  - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...de0fac2e4500dabe0009e67214ff5f5447ce83dd)
  
  ---
  updated-dependencies:
  - dependency-name: actions/checkout
    dependency-version: 6.0.2
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Co-authored-by: Affaan Mustafa <me@affaanmustafa.com>

  dependabot[bot] · 2026-03-31 14:07:40 -07:00
  87363f0e59
• chore: pin actions to commit SHAs and add Skills section to CLAUDE.md

  Pin all GitHub Actions to commit SHAs instead of mutable version tags
  across ci.yml, release.yml, maintenance.yml, and all reusable workflows.
  This prevents supply-chain attacks via tag hijacking.
  
  Add the required Skills section to CLAUDE.md mapping project files
  (README.md, .github/workflows/*.yml) to their respective review skills.

  Andriy Kalashnykov · 2026-03-29 17:16:56 -04:00
  46f37ae4fb
• fix: pin 6 actions to commit SHA, extract 1 expression to env var
  dagecko · 2026-03-28 15:57:55 -04:00
  28a1fbc3f2
• feat: deliver v1.8.0 harness reliability and parity updates
  Affaan Mustafa · 2026-03-04 14:48:06 -08:00
  48b883d741
• fix: sync plugin.json version with latest tag (#171)

  Sync plugin.json version to 1.4.1, add CI check to verify versions match on release, and add release.sh script. Fixes #170.

  ericcai · 2026-02-08 16:18:49 -08:00
  d2191d09a2
• feat: add comprehensive CI/CD pipeline

  Adds GitHub Actions workflows for CI, maintenance, and releases with multi-platform testing matrix.

  Roei Bar Aviv · 2026-01-28 23:05:43 -08:00
  7c0bc25982