Repository navigation
Refresh Craft release pins (2026-10-16) - #5
Merged
Merged
Conversation
devsolux
added a commit
that referenced
this pull request
Oct 16, 2026
… moves and releases Pull requests #4 and #5 (runs 38717981671 and 38883983466) moved CADCraft 0.7.0, EffectCraft 0.10.0, FilmCraft 0.8.0, GridCraft 0.7.0, LightCraft 0.8.0, PhotoCraft 0.9.0 and SoundCraft 0.7.0. Each card was rechecked at its new tag; no catalog launch flag or smoke tool changed. - CADCraft: find_text, render window, inspect_drawing skipped records, --lazy/--launch, and AutoLISP file access treated as a script (also in the safety list). - GridCraft: legacy .xls imports partially (the card said refused); XLS, XLSB and ODS are import-only; new save refusals; set_cell types. - PhotoCraft: a lossy ORA save writes a copy, dpxBits, adjustment params, Krita import. - LightCraft: rendereddng export. - SoundCraft: 0.7.0 accepts root flags the catalog does not pass yet; bounce_mix has no replace guard. - EffectCraft, FilmCraft: recheck date only. AGENTS.md and .claude/CLAUDE.md now say to pull main first, finish a pin move with a card recheck and ledger entry, treat launch-flag changes as catalog changes with local binary acceptance, and push, tag or release only on request. SKILL.md says cards describe the pinned release and an older installed binary's live tool list wins. Source ledger, verification report and changelog (Unreleased) updated; plugin regenerated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
devsolux
added a commit
that referenced
this pull request
Oct 16, 2026
…dening, doc drift ECC security, silent-failure, Python and consistency reviews; every fix below was verified against the code first. Release workflow: verify checks out the commit the refresh job pushed and merge uses --match-head-commit on a same-repository pull request only (a fork could name its branch bot/releases); a missing pull request fails the merge job; the PR body no longer claims verify results in advance. check.py enforces both and pins the manifest signers to this repository's workflow on main and Apple team DJ6XS33FX8. refresh_releases.py stops on a downgrade, a moved tag or an asset re-published under an unchanged tag and name, moves `reviewed` only with a pin (no more date-only PRs like #5), and restores the old manifest when validation fails. setup: /usr/sbin/spctl and /usr/bin/codesign by absolute path; promote checks the candidate bytes before replacing the live binary; 30-minute subprocess timeout; state dir and binaries must lie outside the workspace; cmd.exe shims refuse metacharacters; per-host missing-CLI warnings; ownership warning on matching-but-foreign registrations; allow-list status; --remove keeps binary and pin while a kept registration still launches them; clearer args-only mismatch message. The SoundCraft guard is ASCII-only, refuses prereleases, and setup re-pins an unreadable label instead of looping. CLI and workspace: empty --expected-sha256 fails; --all with --app is refused; --timeout limited to (0, 120]; type checks on workspace id and receipt paths. Docs: confined apps read the whole workspace; unconfined-app rule; doctor not_installed row; workflow guarantees and job-less bot-PR CI runs; verification and ledger brought current; CONTRIBUTING lists test-sdk; plugin README upgrade flags; CLAUDE.md mentions make github-pull; catalog basis names the WordCraft and SoundCraft root-flag reviews. Gates: make check (72), make test (231), build, verify-build, test-sdk, publish-check. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated refresh of config/releases.json and config/signatures.json from the latest upstream releases on 2026-10-16. Review the diff: a changed app needs its card and smoke tool rechecked at the new tag. The verify jobs below ran the real setup on Linux, Windows and macOS runners.