rcourtman 4eeb297ca6 Watch main and every active release line for new frontend advisories daily (#2366) ...

On 30 Sep and 1 Oct two new advisories (brace-expansion
GHSA-q2hr-2g5m-vwhr, DOMPurify GHSA-p98j-92pf-mc4p) failed the required
frontend audit on every PR across main, release/v6.4 and release/v6.5,
holding the v6.5 RC for days and blocking the v6.4.6 preparation. The
existing scheduled npm-audit is informational and only sees main. This
adds a daily workflow that runs the same complete frontend audit as
Build and Test on main and every active release line, fails on any
finding, and names the branch, advisories and fix. The maintainer's
release-path health check raises it to Delivery immediately.

2026-10-01 12:01:43 +01:00

..

integration

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

run.sh

test(scripts): run python smoke tests

2026-03-28 21:53:09 +00:00

test_admin_docs.py

Make administration guides safe and executable

2026-10-01 08:23:23 +01:00

test_agent_docs.py

Keep agent setup tokens out of commands and unverified downloads

2026-10-01 05:41:44 +01:00

test_api_auth_docs.py

Make administration guides safe and executable

2026-10-01 08:23:23 +01:00

test_benchmark_workflow_contract.py

ci: retain exact benchmark collection provenance

2026-09-06 11:12:42 +01:00

test_dependabot_config.py

Keep Vitest major upgrades coordinated

2026-09-27 10:10:45 +01:00

test_dependency_advisory_watch.py

Watch main and active release lines daily for new npm advisories

2026-10-01 11:46:12 +01:00

test_docs_mirror.py

Stop background git from racing test_docs_mirror temp cleanup

2026-09-02 09:55:47 +01:00

test_e2e_workflow_contract.py

Shard internal/api race tests and drop probation E2E from PRs

2026-09-29 11:43:57 +01:00

test_gitleaks_ignore.py

security: narrow historical secret scan allowlist

2026-08-08 03:17:57 +01:00

test_localized_public_docs.py

Add localized public docs entry points

2026-06-13 08:07:46 +01:00

test_npm_audit_retry.py

Keep positive npm advisory evidence fail-closed

2026-09-30 13:23:29 +01:00

test_pbs_docs.py

Keep PBS guidance checks credential-safe and TLS-bounded

2026-10-01 09:16:32 +01:00

test_public_docs_claims.py

Align TrueNAS guidance with JSON-RPC runtime

2026-09-01 18:32:39 +01:00

test_release_lifecycle_rehearsal.py

Add shadow release lifecycle rehearsal workflow

2026-10-01 09:11:15 +01:00

test_release_train_ci_contract.py

fix(ci): include release trains in build and E2E triggers

2026-09-06 00:58:57 +01:00

test_repo_docs_link_drift.py

Allow standing triage disclosure link

2026-08-26 11:11:04 +01:00

test_require_safe_gh_attestation.py

Bind release activation to trusted provenance

2026-08-30 01:51:58 +01:00

test_root_pair_diagnostic.py

fix(ci): archive durable root-pair candidate

2026-09-10 19:13:29 +01:00

test_signed_installer_docs.py

Preserve alert lifecycle truth and safe pinned updates

2026-09-24 17:43:50 +01:00

test_sync_chart_release_metadata.py

fix(deploy): pin docs links to release refs

2026-03-28 21:32:11 +00:00

test_telemetry_adoption_report.py

fix(server): make local service-health probes dual-stack and bounded

2026-09-30 21:36:39 +01:00

test_telemetry_schema_parity.py

Add privacy-safe telemetry lifecycle and outcome signals

2026-07-23 01:10:38 +01:00

test_truenas_docs.py

Make TrueNAS diagnostics safe and distinguish missing telemetry

2026-10-01 02:16:44 +01:00

test_uuid_layout_diagnostic.py

ci: add fixed UUID layout diagnostic without release gate waiver

2026-09-06 22:11:03 +01:00

test_validate_published_release.py

test(release): reject signatures outside the configured trust boundary

2026-09-05 17:17:54 +01:00

test_workflow_trust.py

ci: qualify setup-node v7 consumer contracts

2026-09-09 19:29:17 +01:00

test_write_github_output.py

Close runner output alias bypasses

2026-09-01 16:54:07 +01:00

test-ci-benchmarks.sh

fix(ci): bind benchmark samples to executed binary hashes

2026-09-06 13:32:05 +01:00

test-cloud-public-signup-smoke.sh

Add Pulse Cloud public signup smoke

2026-04-23 23:09:10 +01:00

test-common-lib.sh

feat: add shared script library system and refactor docker-agent installer

2025-10-20 15:13:38 +00:00

test-hot-dev-auth.sh

Stabilize script smoke checks

2026-05-28 12:55:33 +01:00

test-hot-dev-bg.sh

fix(dev): preserve executable launchd wrapper mode

2026-08-27 17:54:10 +01:00

test-hot-dev-runtime.sh

build(deps): qualify the go-minor-patch dependency group

2026-09-23 06:49:52 +01:00

test-install-ps1-parser.sh

Tighten unified agent hardening proof

2026-04-23 23:37:25 +01:00

test-install-update-resilience.sh

Guard auto-update asset staging and migrate stale update units

2026-07-28 11:56:52 +01:00

test-npm-audit-retry.sh

Bound the npm audit retry budget by wall clock

2026-09-04 12:13:31 +01:00

test-pulse-auto-update.sh

fix(update): disarm perform_update RETURN trap after it runs

2026-09-20 17:42:19 +01:00

test-reclaim-closed-pr-capacity.sh

Reclaim CI capacity when pull requests close

2026-09-02 11:03:53 +01:00

test-retired-trial-acquisition-docs.sh

Rename retired trial acquisition proof assets

2026-04-28 18:38:10 +01:00

test-script-reference-integrity.sh

Switch script-reference integrity test from rg to git grep for portable CI

2026-05-12 00:30:43 +01:00

test-toggle-mock.sh

Scale large-estate workload and Proxmox demo performance

2026-08-23 15:09:32 +01:00