Skip to content

Comments

🔧 update (ci): bump release-build-flow-action to v1.5.0#16

Merged
warengonzaga merged 69 commits intomainfrom
dev
Feb 22, 2026
Merged

🔧 update (ci): bump release-build-flow-action to v1.5.0#16
warengonzaga merged 69 commits intomainfrom
dev

Conversation

@warengonzaga
Copy link
Owner

This pull request updates the release workflow to use a newer version of the wgtechlabs/release-build-flow-action GitHub Action. This ensures that the release process benefits from the latest features and bug fixes.

Release workflow update:

warengonzaga and others added 30 commits February 18, 2026 23:38
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- add if-guard to package/container jobs (main push only)
- narrow ci.yml top-level permissions to contents: read
- add per-job permissions for package and container jobs
- remove unused packages/security-events write from release.yml
- fix commit-lint push range to validate all commits (before..after)
- quote SHA interpolations in commit-lint PR log command
- remove duplicate bun run build step from package.yml
- add --bail flag to pre-commit bun test hook
- add msgFile undefined guard in validate-commit-msg.mjs
- make variation selector optional for trash and gear emojis
- strengthen readCache to validate latest and runtime field types

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
permissions are already defined in the called workflows (package.yml,
container.yml) - specifying them in the caller causes startup_failure
on duplicate runs triggered by open PRs.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- update commit-lint workflow to capture all reachable commits on initial push
- improve update-checker test to assert cache file absence when fetch fails

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…ction

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- pin all GitHub Actions to full commit SHAs for supply chain security
- move pages/id-token permissions to deploy job only
- pin bun version to 1.2.x and use --frozen-lockfile
- use dynamic concurrency group name with workflow prefix

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- validate runtime value against allowed list when reading cache
- sanitize current version before embedding in prompt context
- move AbortController setup outside try block and use finally to clear timeout

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- add reusable GitHubIcon Svelte component to replace inline SVG duplication
- add skip-to-main-content link for keyboard navigation
- add aria-label to primary nav element
- add aria-hidden to decorative SVG icons

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- add scrollbar-width and scrollbar-color for Firefox compatibility
- use CSS variable for scrollbar thumb hover color
- remove quoted font family name for Inter

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
warengonzaga and others added 27 commits February 20, 2026 19:20
* 🔧 update (cli): move bundled deps to devDependencies for global install

* 🔧 update (ci): upgrade release-build-flow-action to v1.4.0

* 🔧 update (ci): upgrade release-build-flow-action to v1.4.1

* 🔧 update (ci): upgrade release-build-flow-action to v1.4.2

* 🔧 update (web): correct path references in dev notice fallback page

---------

Co-authored-by: Waren Gonzaga <opensource@warengonzaga.com>
@github-actions
Copy link

📦 Package Build Flow — Monorepo Build

🔀 Pull Request Build — Pre-release package for testing PR changes

Package Version Status Install
@tinyclaw/plugins 1.1.0-dev.176586e ✅ Published npm i @tinyclaw/plugins@1.1.0-dev.176586e
@tinyclaw/types 1.1.0-dev.176586e ✅ Published npm i @tinyclaw/types@1.1.0-dev.176586e
tinyclaw 1.1.0-dev.176586e ✅ Published npm i tinyclaw@1.1.0-dev.176586e
@tinyclaw/plugin-channel-discord 1.1.0-dev.176586e ✅ Published npm i @tinyclaw/plugin-channel-discord@1.1.0-dev.176586e
@tinyclaw/plugin-channel-friends 1.1.0-dev.176586e ✅ Published npm i @tinyclaw/plugin-channel-friends@1.1.0-dev.176586e
@tinyclaw/plugin-provider-openai 1.1.0-dev.176586e ✅ Published npm i @tinyclaw/plugin-provider-openai@1.1.0-dev.176586e

📥 Quick Install (changed packages)

npm i @tinyclaw/types@1.1.0-dev.176586e @tinyclaw/plugins@1.1.0-dev.176586e @tinyclaw/plugin-channel-discord@1.1.0-dev.176586e @tinyclaw/plugin-channel-friends@1.1.0-dev.176586e @tinyclaw/plugin-provider-openai@1.1.0-dev.176586e tinyclaw@1.1.0-dev.176586e

This package was built automatically by the Package Build Flow action.

@github-actions
Copy link

github-actions bot commented Feb 22, 2026

🛠️ Container Build Complete - Dev Build

Build Status: ✅ Success
Flow Type: dev
Description: Development and testing


📦 Pull Image

Docker Hub: docker pull warengonzaga/tinyclaw:dev-176586e
GHCR: docker pull ghcr.io/warengonzaga/tinyclaw:dev-176586e

📋 Build Details

Property Value
Flow Type dev
Commit 3613b71
Registry Docker Hub + GHCR

🏷️ Image Tags

warengonzaga/tinyclaw:dev-176586e
ghcr.io/warengonzaga/tinyclaw:dev-176586e


🔍 Testing Your Changes

  1. Pull the image using one of the commands above
  2. Run the container with your test configuration
  3. Verify the changes work as expected
  4. Report any issues in this PR

🚀 Quick Start

# Pull and run the container
Docker Hub: docker pull warengonzaga/tinyclaw:dev-176586e
docker run <your-options> <image>


🔒 Security Scan Results

📋 Pre-Build Security Checks

Source Code Scan: 0 vulnerabilities found
Dockerfile Scan: 0 misconfigurations found

🐳 Container Image Vulnerabilities

Severity Count
Total 0

📊 Detailed Security Reports

View detailed vulnerability reports in the GitHub Security tab.


🤖 Powered by Container Build Flow Action v1.2.0
💻 with ❤️ by Waren Gonzaga under WG Technology Labs, and Him 🙏

@warengonzaga warengonzaga merged commit 3649640 into main Feb 22, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants