Repository navigation

fix(release): security review fixes for the release pipeline and CI - #28

Merged

HackTuah merged 10 commits into

mainfrom

fix/sec-release

Oct 7, 2026

Merged

fix(release): security review fixes for the release pipeline and CI#28
HackTuah merged 10 commits into
mainfrom
fix/sec-release

Commits on Oct 7, 2026
- fix(release): refuse a signed tag pushed under another tag's name
  
  Ayla Croft
  and
  claude
  committed
  0876dbe
- fix(release): open the store gate only on the lead's exact closing line
  
  Ayla Croft
  and
  claude
  committed
  582fcd5
- fix(release): send Firefox Add-ons the release's own zip
  
  Ayla Croft
  and
  claude
  committed
  1f064cd
- ci(release): fixed property-test seeds in the release build
  
  Ayla Croft
  and
  claude
  committed
  f3e10ab
- ci: a pull request's scans use the base commit's settings and scripts
  
  Ayla Croft
  and
  claude
  committed
  b675f39
- docs: say which review and release controls are enforced
  
  Ayla Croft
  and
  claude
  committed
  bfd8bc4
- docs: supported versions and release state for 1.0.0
  
  Ayla Croft
  and
  claude
  committed
  f1db3f3
- fix(store): declare the learner's own key as authentication info on Firefox
  
  Ayla Croft
  and
  claude
  committed
  573d33a
- docs: allowed_signers says what's enforced; slices 28 and 30 note the review's changes
  
  Ayla Croft
  and
  claude
  committed
  f4943c1
- Merge branch 'main' into fix/sec-release
  HackTuah
  authored
  6ae5a67