gitea_admin
released this
2026-07-03 08:21:36 +00:00
| 1281 commits to main since this release
Added
- Dashboard: RELEASE rows now surface per-step logs for the credential-safe
steps of a release run (compile/publish/test/validate/…). A succeeded release
folds to its artifacts and step-log chips; a FAILED release folds to its
step logs (the point of opening it). The promote/sign/devbump/cadence pods —
which hold Forgejo push tokens + GPG/cosign signing keys — are never
web-published: the wf-poller's logidx awk gates release nodes by a DEFAULT-DENY
allowlist of safe step-template names (exact $7 in S match + NF==7
field-integrity), the same templates already published for build runs. Because
emit_logs only mirrors indexed S3 keys, a dropped step's log is never fetched.
Guarded by tests/dashboard-release-logs.test.js (extracts the awk as the
single source of truth; locks the render/render-installer boundary) +
tests/dashboard-release-render.test.js. (Live release-log streaming remains a
follow-up; this ships the archived path.)
Downloads