635 Commits
Author SHA1 Message Date
winewill 0d03fb3ca3 Merge master into desktop channel version policy 2026-11-04 15:30:38 +08:00
winewill f823eb9c60 Merge pull request #7864 from deepseek-harness/feat/desktop-staging-percentage
feat(desktop): 支持发布表单配置更新灰度比例
2026-11-04 15:23:47 +08:00
winewill 90ff03beb7 Merge pull request #7777 from deepseek-harness/fix/desktop-artifact-zip-mtime
fix(desktop): 保留 Actions 安装包 ZIP 中的文件修改时间
2026-11-04 15:10:19 +08:00
winewill 6958fd4e3a fix(desktop): default publication rollout to 100 percent 2026-11-04 14:38:16 +08:00
winewill 001bc22978 feat(desktop): configure staged rollout during publication 2026-11-04 14:34:45 +08:00
winewill e0e2c63a9c fix(desktop): bridge workflow modes for older sources 2026-11-04 13:57:19 +08:00
winewill d65fd521b5 fix(desktop): clarify workflow version mode names 2026-11-04 13:51:39 +08:00
winewill fa302c8343 Merge pull request #7636 from deepseek-harness/build/desktop-publish-recovery
feat(desktop): 官网安装包发布恢复与 GitHub 产物归档拆分
2026-11-04 13:17:10 +08:00
winewill 152d0294c2 fix(desktop): decouple update channels from version suffixes 2026-11-04 11:06:11 +08:00
winewill 6ad048912e Merge current publication recovery into artifact timestamp fix
# Conflicts:
#	apps/desktop/packaging/README.i18n.yaml
#	apps/desktop/packaging/README.md
#	apps/desktop/packaging/README.zh.md
#	scripts/macos-package-workflow.spec.ts
#	scripts/windows-package-workflow.spec.ts
2026-11-04 11:05:13 +08:00
creatixchu 681cf973e2 fix(release): verify helper CLI execution on clean checkouts 2026-11-03 17:29:37 +08:00
creatixchu 41beadfa2a fix(release): verify helper producers and preserve rerun artifacts 2026-11-03 17:09:19 +08:00
winewill df37050b48 Fail visibly when website preparation outputs are missing 2026-11-03 16:09:48 +08:00
creatixchu 3f579d45eb fix(release): bind helper builds to the Actions run commit 2026-11-03 15:49:44 +08:00
creatixchu 0ea2846c3e fix(release): keep explicit helper reuse in the publish form 2026-11-03 15:36:49 +08:00
creatixchu 447e1b88aa docs(release): preserve the existing tag-check description 2026-11-03 15:27:24 +08:00
creatixchu 8454ed9771 docs(release): shorten CUA reuse input labels 2026-11-03 15:26:36 +08:00
winewill 8ecdc76b41 Merge master and align desktop publication recovery 2026-11-03 15:20:56 +08:00
creatixchu aa035e6845 feat(release): reuse CUA helper builds with matching source bytes 2026-11-03 15:05:26 +08:00
winewill 3c46127816 Merge remote-tracking branch 'origin/master' into feat/desktop-update-channels 2026-11-03 13:20:42 +08:00
winewill 912e0383fb fix(desktop): preserve modification times in installer artifacts 2026-11-03 12:54:24 +08:00
imccyuandimccyu 07f2b259e7 ci: run the merge checks on release branches, and fix the ptc-script-imports fixture (#7732)
* ci: run the merge checks on release branches too

All three `Policy` workflows filtered on `master`, so a pull request into `release/dsh-*`
got no `Master Change` and no `Pre-Merge Check`, and its review check only refreshed when
somebody submitted a review. The checks already take their base branch from the event, so
the filters now name the release branches as well.

* ci: limit the release branch filter to x.y.z

`release/dsh-*` also matched prerelease branches such as `release/dsh-0.1.2-alpha.4`;
the filter now spells the version digits, so only `release/dsh-x.y.z` counts.

* test(snapshot): carry the subagent identity section into the ptc-script-imports scenario

The runtime context gained a `subagent:identity` section and every session fixture but
this one was regenerated, so replay failed with a mismatch on the added section.

(cherry picked from commit c7a4119965cb26c69fd8fccbfd703c7d73351742)

---------

Co-authored-by: imccyu <[email protected]>
2026-11-02 20:12:14 +08:00
creatixchu 4ac71ed747 Merge master with separate development helper identity 2026-11-02 14:55:17 +08:00
winewill d2bd3f3893 feat(desktop): rename stable update channel consistently 2026-11-02 14:27:21 +08:00
winewill 8caf3d7838 fix(desktop): clarify publication approval and recovery diagnostics 2026-10-30 18:20:41 +08:00
winewill 7502558cc5 fix(desktop): address publication recovery review 2026-10-30 17:52:00 +08:00
winewill 2653c587ec feat(desktop): recover website publication and artifact archival 2026-10-30 17:09:00 +08:00
imccyu 93e28b1418 Merge pull request #7581 from deepseek-harness/fix/merge-approve-jobs
ci: decide the review verdict in one Approve Check job
2026-10-30 16:15:02 +08:00
creatixchu 02e307aef5 Merge permission guide into the desktop helper packaging branch 2026-10-30 10:47:59 +08:00
winewill c2cda0bdd7 Merge origin/master into feat/desktop-update-channels 2026-10-29 15:27:08 +08:00
winewill 6d0a5f0f12 refactor(desktop): isolate updater qualification and gate dependency versions 2026-10-29 15:23:41 +08:00
creatixchu fc1ed8c1cd fix(desktop): verify only the Computer Use helper bundle and stage it only when shipped
Limit the no-resign exemption to the staged helper so LibreOffice's
unsigned bundle keeps per-file signing, verify the helper's ticket and
Gatekeeper acceptance, stage it after the configuration check only for
sources that ship the bundle, and report a missing helper by path.

Refs #7514
2026-10-29 13:27:42 +08:00
LogosVeritas 09eac50a14 Merge master into feat/python-sdk-slash-commands 2026-10-29 12:59:36 +08:00
creatixchu 6137225576 fix(desktop): ship the notarized Computer Use helper in macOS packages
Build and stage the helper before packaging, keep its bundle unpacked
outside app.asar, verify it instead of re-signing its files, and let the
provider open the unpacked copy.

Refs #7514
2026-10-29 12:56:32 +08:00
winewill 9743690280 test(desktop): qualify update channel switching on Windows CI 2026-10-28 19:24:21 +08:00
CreatixChu c6f3dff031 Merge pull request #7420 from deepseek-harness/feat/cua-desktop-delivery
feat(cua): 支持 Desktop 按需安装与授权
2026-10-28 16:20:24 +08:00
LogosVeritas 9976a87e97 Merge master into feat/python-sdk-slash-commands 2026-10-28 16:14:33 +08:00
creatixchu f0b4345c88 test(cua): verify retained helper tarballs and guide partial release retries 2026-10-28 15:48:10 +08:00
creatixchu e2bcf1b2f1 feat(cua): reuse verified helper artifacts from selected packaging attempts 2026-10-28 15:09:55 +08:00
winewill b2a7d2ec95 ci(windows): remove optional packaging build root 2026-10-28 14:33:13 +08:00
creatixchu 077ec64ac2 Merge remote-tracking branch 'origin/master' into feat/cua-desktop-delivery
# Conflicts:
#	apps/web/tests/preview-boot.e2e.ts
#	packages/client/ui-plugin-manager/README.i18n.yaml
#	scripts/tests/ci-release-selfhosted.spec.ts
#	snapshots/web/creation-recommendations/session.v4.jsonl
2026-10-28 14:08:20 +08:00
imccyu 18bd83bf88 fix(ci): repair Wine heap budget and release workflow tests (#7438)
* fix(ci): budget Wine client heap and align release assertions

* fix(release): restore hosted publication runners

* fix(ci): split Wine client checks and strengthen dispatch tests

* docs: remove Wine diagnostic instruction from AGENTS
2026-10-28 11:22:35 +08:00
imccyu 7509c174d9 fix(build): serialize release builds and give Client checks 8 GiB (#7435)
* fix(build): serialize publication and raise client aggregate heap

* docs: refresh development guide translation pairing

* fix(release): align pack runner and allow explicit tag-check bypass
2026-10-28 01:58:28 +08:00
imccyu 18a559e7dd fix(ci): deepen the pre-merge fetch when the time window strands the merge base 2026-10-27 23:01:19 +08:00
creatixchu e6adfaeab2 Merge remote-tracking branch 'origin/feat/cua-helper-permissions' into feat/cua-desktop-delivery
# Conflicts:
#	snapshots/web/creation-recommendations/session.v4.jsonl
2026-10-27 18:20:31 +08:00
creatixchu dbd881ab46 feat(cua): deliver notarized helpers through on-demand plugin installation 2026-10-27 17:07:25 +08:00
imccyu 5d0b96b5bd docs: state the pre-merge order the check runs, without a stray blank line 2026-10-26 23:52:18 +08:00
imccyu 3ddacfd725 fix(ci): narrow the version scan and keep a crashing check inside its mode
The scan now reads exactly the manifests the release tooling rewrites, names
every directory and file it cannot read, and refuses an empty corpus; the
command takes the root it checks so the exit code is tested, and the workflow
reports a crashed check as a warning in report mode.
2026-10-26 23:51:18 +08:00
imccyu 1e433706f4 refactor(ci): run the pre-merge steps as one ordered list
Each step is a spawn whose stdio reaches the job log, the first failure stops
the list, and the script decides from CHECK_MODE whether to annotate as an
error or a warning, so the workflow only calls it.
2026-10-26 23:24:20 +08:00
imccyu a518d10c95 fix(ci): keep the pre-merge check's failures honest
The missing-script branch now fails in block mode instead of passing, the shell
block parses, the version walk refuses a directory it cannot read or one that
holds no manifest, the install is watched before anything else can throw, and a
spec runs `bash -n` over every Policy shell block.
2026-10-26 23:12:29 +08:00