From 8769f07539ea34f6c16fe2d139fd2574f9ef2beb Mon Sep 17 00:00:00 2001 From: NuklearRabbit <145918611+NuklearRabbit@users.noreply.github.com> Date: Wed, 30 Sep 2026 23:02:50 +0200 Subject: [PATCH] release: bridge legacy installations to ForgeFlow-Public --- .gitea/workflows/release.yml | 4 - README.md | 4 +- SOURCE_MANIFEST.txt | 371 +++++++++++++++-------------- docs/RELEASE_NOTES_0.10.16.md | 11 + package-lock.json | 4 +- package.json | 7 +- scripts/publish-binary-release.cjs | 22 +- scripts/verify.mjs | 5 +- src/main/config-store.cjs | 14 +- src/main/update-service.cjs | 26 +- src/renderer/mock-bridge.js | 2 +- src/renderer/views.js | 2 +- src/shared/release-policy.cjs | 27 +++ tests/config-store.test.mjs | 14 ++ tests/release-policy.test.mjs | 21 ++ tests/update-service.test.mjs | 27 +++ 16 files changed, 339 insertions(+), 222 deletions(-) create mode 100644 docs/RELEASE_NOTES_0.10.16.md create mode 100644 src/shared/release-policy.cjs create mode 100644 tests/release-policy.test.mjs diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml index 0b24277..e25e1a7 100644 --- a/.gitea/workflows/release.yml +++ b/.gitea/workflows/release.yml @@ -1,10 +1,6 @@ name: ForgeFlow signed release on: - push: - branches: [main] - paths: - - package.json workflow_dispatch: permissions: diff --git a/README.md b/README.md index 71d396f..ff569d9 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,9 @@ ForgeFlow is a Windows desktop application for teams that use Git, Gitea and self-hosted Docker or Unraid servers. It brings local changes, remote commits and the exact revision running on a server into one workspace, then guides review, commit, push, deployment and verification. -**Downloads:** Existing signed Windows releases remain at [the legacy ForgeFlow release page](https://gitea.itworx.tech/Jens/ForgeFlow/releases/latest) during the public-repository transition. The [curated public source](https://gitea.itworx.tech/Jens/ForgeFlow-Public) is separate; it will become the release destination only after signing and update compatibility are verified. +> **Legacy update compatibility:** This repository remains available for existing installations. Version 0.10.16 is the bridge release that moves the default updater to `Jens/ForgeFlow-Public`. + +**Downloads:** Use [ForgeFlow-Public releases](https://gitea.itworx.tech/Jens/ForgeFlow-Public/releases/latest) for new installations. Older installations can receive the bridge from [this legacy release page](https://gitea.itworx.tech/Jens/ForgeFlow/releases/latest). ## See the workflow diff --git a/SOURCE_MANIFEST.txt b/SOURCE_MANIFEST.txt index 6d804b6..7a47277 100644 --- a/SOURCE_MANIFEST.txt +++ b/SOURCE_MANIFEST.txt @@ -1,14 +1,14 @@ -ForgeFlow 0.10.15 source manifest +ForgeFlow 0.10.16 source manifest SHA-256 BYTES PATH (The manifest includes tracked and non-ignored source files, excluding itself.) ec40b1ed8e5152ca4175bbe97be43f0e2e911894112dc6a47c2c348069f79abf 87 .gitattributes -cc690743121cd3e3a4f12499024456c0b28c4aca4af0f566e57aa9ca87124ef9 883 .gitea/workflows/chatgpt-validation.yml -037209289e7a387d855ee061fec9b385db57c6a31ee71c770e684f70dcae28f8 5157 .gitea/workflows/managed-validation.yml -c70a5dd662bc71e91e255b51b1a907939682259af2e27091178ef5ea231cfd77 1896 .gitea/workflows/quality.yml -e6b76033c44516b625cd9f40e89824ebc8f74ef2a34666d6d44c042fc602c406 4905 .gitea/workflows/release.yml +9ae6d151643de45b36312f1345960cc03137b5e79a9025e9c7b9acf4ac08a2ae 886 .gitea/workflows/chatgpt-validation.yml +ee3b2cbd2a09a95f3ebd7dfa6af3ac401b13b2ba9496f83cd9f12e15fb975c89 6740 .gitea/workflows/managed-validation.yml +d80f0fe159d2a1604002db4272d1d49cc3ec2097100b3a3bbb3741a855fb1a11 1900 .gitea/workflows/quality.yml +72166e4caa3d3d09ce52115ac2098975a6c97a95d3f5da2305a1f8b10ae4cd02 4892 .gitea/workflows/release.yml 83fac3efff45f3dc926080b280ae190b6bb40eb8dae7b8cb5d27255759bc9c47 267 .gitignore -f14b4987904bcb5814e4459a057ed4d20f58a633152288a761214dcd28780b56 3 .nvmrc -89545860bd6f7566da81edc8328cd2a1ebf33e81a4b0dcf2cec74338c05e8cac 1753 build-windows.ps1 +12d3a4efa6646b3ece4782f70033b9785bf0d167b553c43e22579b031cea5c4d 4 .nvmrc +89cfdec9f5e47fa1c4ce3f883462ffbd5a95938f1e228535782b2561142afdeb 1754 build-windows.ps1 0970821475a4452aa19e447e9397a95db836791f16890a1a83fd748ac033dc86 8830 build/icon-128.png 09112c1425ca953d8dd8b2bcfd221e5a84b9f81752f7168f360e295030cbc8f2 521 build/icon-16.png 510aa27935a63ad16cc22978ccfde3bdd441cb970ad42d9f05af52c0e5999195 28923 build/icon-256.png @@ -18,73 +18,74 @@ ca32a76e708d565c4af659f0f4d2615fc32114c3f75aec1454862a3ed1e72c41 2263 4633990a4b055bb3d00fef915ee29e85be5ee8413f809334728ad9688973c183 3364 build/icon-64.png 25048ed854e8ce8fece115e555c98d25507b002f8019b6ae717b54604c868c50 46223 build/icon.ico 16efd2fca83004f781eae40ae0f706a004ce0bddf338dd087b8adf7eb10c1d84 85704 build/icon.png -164c059453a5737110b4e5e98b6211650c757f0aff710f8f7523ffe0ff1815d7 113 build/update-signing-public.pem -5f4aca19a35cbcaffa1a6993ce96b7d66052ec2b286022f2af74594e8a310568 15712 CHANGELOG.md +5cc93571f6c5648cad5116680ae5218f486407c5026ee37cb0ab2fe93a16a0b4 116 build/update-signing-public.pem +343ea8dc00a3257801ecc199518a65d4d4adb2644c3acf7b614eb66032ab2afb 15969 CHANGELOG.md 3754dcaa776ead5dc60b4955ed4294fd8580577ecb9ce29cb0d9fbbaf9253313 811 CONTRIBUTING.md -c612fcc44ff222db0c9a4cfd11a4076fafe080e4ada31e689a08739a4f14e74f 1650 docs/ACCEPTANCE.md -3785ad21872e3dc08fde9ef819e26f42161ba6ce6d235f87fcebd7859dfaf148 8293 docs/ARCHITECTURE.md -e05458ee2696e3c57e2475bb42ae1f914f6a36e01768d7a26a3199f1fffed490 1157 docs/COVERAGE_POLICY.md -9eb9eec82518c0bfc7686f5faaf690a93ed63c71d35f1dc5a2c5ec5199da652a 3124 docs/CURRENT_STATE.md -8ea655d1912ac2e17f8834e33a566a8b14461b396ec4268c396ca189a1749b94 2205 docs/DEPENDENCY_AUDIT.md -3b9c301313a6406c39ec09f5ad7247dafdf47f6c21505ab8970b206cb1734f31 2788 docs/DEPLOYMENT_MIGRATION_EXAMPLE.md -30a92bcf5daadb019efa2f82cb820ea302490dd1d68fb772674dc3faccd3e594 2045 docs/DEPLOYMENT_SETUP.md -eb42f979666e05d51c587e4223282914926a2b9b1ade9f3fb75525019ce7f738 4616 docs/DIAGNOSTICS.md -1d8aa3c688a9d330b9a5303b09e9e3049c50bf04f97807c7ff659607baa34c32 1464 docs/ERROR_CODES.md -648dd6bca6b45668fb86eb3e1f6c5898dd8da0291b990f1bb5105cfd79421343 1301 docs/MUTATION_MODEL.md -8dc95f69e6f6c8415702c8e79fb6b466c4d60061afded9140450e7e558eaefe5 3704 docs/PRODUCTION_READINESS_1.0.md +33954dcf8b898885c94fa486a1753a1298dfe6846fe4c5c6dff91d22f64ffe60 1684 docs/ACCEPTANCE.md +b89ffb60db36a9cca0ed9ca70edd7e8e5d427d51846b93e8383ce6f406309a9d 8514 docs/ARCHITECTURE.md +6450bf6b1b5028a6dd9f928f6cbb5a84281a68c24361e2a4216679993e7fb149 1175 docs/COVERAGE_POLICY.md +af6d5af037687a09a43f14cc19ffe75f959a110765fbddc1ab2803833f735764 3178 docs/CURRENT_STATE.md +1923c673d5cf8b5aa5fbd500eaef648f3b3eaf47527d34e3d0bb34474da8822e 2251 docs/DEPENDENCY_AUDIT.md +4d4b5539024c3805a087f92c85ab48e9aaab366aa68d3e4aa558139a019dc4ba 2851 docs/DEPLOYMENT_MIGRATION_EXAMPLE.md +e9163fbd6a0532f483e32b4009cedd92f84946e4b949107f8c21cc7c2e4f86d3 2103 docs/DEPLOYMENT_SETUP.md +8a1be38b097c1cbfaaaee150c64b99f44bbe007817200d675a2b583d8f2198e5 4766 docs/DIAGNOSTICS.md +ff0d8aea8eff6b211493c99fbb8ee7d67bb70eb1d0b4312f3961f651a17c5683 1479 docs/ERROR_CODES.md +303d2558da306550e50f2704bfae0fb23e8abee428db436097d9838a9c6956df 1327 docs/MUTATION_MODEL.md +52fd7c73bcf82ae27ffe12751590d0b05e5fefbafe4a4939e225a6b9258cf0a1 3782 docs/PRODUCTION_READINESS_1.0.md f79908fb3dad98c38030c6e6be7c79a1999e0478ed9c2496923891954438daa1 4581 docs/RELEASE_AUDIT_0.6.0.md -979a0b8e129979be6b265e8571d0a3c1e9ddd4ddb6b0bf55ae748d3478e51854 2296 docs/RELEASE_NOTES_0.10.0.md -0eb44bda2209a5979a6ac693ac4cd4d235c0015031e54b9e895990f37bf60054 1433 docs/RELEASE_NOTES_0.10.1.md -5d3240169765e3fb1d3cd391d09547101227e76dd4670ee46be8ca3a21553a03 894 docs/RELEASE_NOTES_0.10.10.md -36edb4f096a248fb8679bd13e5766befb478cf628c6ccfb21e3eda71bbec7633 992 docs/RELEASE_NOTES_0.10.11.md -a355d3f577c2ec85dde5dfd7b6995f4f1615e2f6bac597529f3ff102acd93c35 1292 docs/RELEASE_NOTES_0.10.12.md -609c55a1c0b06c307ebe16f2daaf1e48601edd57137586e4f2be1febd6a7060a 1931 docs/RELEASE_NOTES_0.10.13.md +2b07fd178fe6dd7c2233876c4aa7de5d2371635755e7ac1f2acbbd5b298d491f 2328 docs/RELEASE_NOTES_0.10.0.md +48da50bb0bd0628187ca2f879f1e58d54978f2a7e30cf0c71df9b55a240d7ba6 1454 docs/RELEASE_NOTES_0.10.1.md +b0202cf6615c149bd79ec8033e99966b54603df3ffad966d91ad0304371b8f97 904 docs/RELEASE_NOTES_0.10.10.md +4724c6f2ca9a8d5126552fa1577c4c53d3c6f14946dc29981408e2543f3a76b5 1002 docs/RELEASE_NOTES_0.10.11.md +876c6794ed47ac83d7042b681946c80ba66ac5cc3e24f5ac53f15c4f194850e8 1304 docs/RELEASE_NOTES_0.10.12.md +7ad75d0a052d9b99b91e78f9b8d3bfe55e3df15e7182d43bd7cfe405a8cfb5fd 1949 docs/RELEASE_NOTES_0.10.13.md 1d5832048dd834a773ee8f34e6599c590373358132203b022b521dd5dde2f179 1571 docs/RELEASE_NOTES_0.10.14.md 055ad0c73f0854a708eedc3bc4e9dfb991b4e6021348c05484da9a47022e995b 1871 docs/RELEASE_NOTES_0.10.15.md -8d713471a437a8a55b00d7e1dd95290680862107bc4e586cf27d727f6274e46c 577 docs/RELEASE_NOTES_0.10.2.md -0942fb2c4a4f972296423b5232687f7389e2c6417a9d48a3244beef9dec907b9 1164 docs/RELEASE_NOTES_0.10.3.md -8f4a0fe6dc250ae210cc2fc1c57c46091822ae6c2a58caa76e0091f255f9f30d 775 docs/RELEASE_NOTES_0.10.4.md -05ed618f5a74a854363930128ca98939808517eedd28b9a508660a0c46e91d97 884 docs/RELEASE_NOTES_0.10.5.md -94bfb2783c1befad1197e1c5e32fc002222c94a28d70d48360a8d53ecd260d5c 772 docs/RELEASE_NOTES_0.10.6.md -226a3b2d4bc7f54841749a283fcdd71b643cd585ba74d673084bee829fef6ea2 903 docs/RELEASE_NOTES_0.10.7.md -4be29ad0cb7ebcf5625172b8d2bd7a67cdc6d64d3a94e2c3f0656cdfd42dcb7a 642 docs/RELEASE_NOTES_0.10.8.md -fb64517aa64d3ecfe8b51b09e198c2c9fbba96d0cd24a87301c7f6dea3076095 961 docs/RELEASE_NOTES_0.10.9.md -a0c00ff76acd1682bb5e0e8dcf6589c9480da436c9c6d30780a1ed58b4dad94f 1770 docs/RELEASE_NOTES_0.2.0.md -5773ead01aa4c522c556295553787482d01b1f5242f053b2c61f120c4de4fa76 5963 docs/RELEASE_NOTES_0.3.0.md -d46de73cf6c4cd5c2ba3f455a7a2af2e0d64ee9d94a97fd1a0bfb44e35c1624a 1093 docs/RELEASE_NOTES_0.3.1.md -0d697d241a08d2427a6e7f5c2f27bd1830a41836a01e08eeff239c7ad5d89982 2445 docs/RELEASE_NOTES_0.3.2.md -df07794fb3923f3fb6a49dacbfcc5a371227edb592b4e86ecffaae0a8799f187 2154 docs/RELEASE_NOTES_0.4.0.md -343862445061e1a8282a7aa9b2304e7d799e58f9956d50eb5352db18d790efad 1134 docs/RELEASE_NOTES_0.4.1.md -e2d67c816a919f00f9e26bf59cf29e5e8cf894536b743d282075c646c5accc96 1605 docs/RELEASE_NOTES_0.4.2.md -1aef74fb109541903c4dbc4d9c48d2bd63507420eaf8cceb31890797a5e4f5fd 670 docs/RELEASE_NOTES_0.4.3.md -85fecec65f7687e1382547166eff62777613825a8d81960dfcb4ae16aa15c8be 617 docs/RELEASE_NOTES_0.4.4.md -5cd0cffecdce942fb1024a0410568174e7704af9bacbe42f81891693a1817a19 378 docs/RELEASE_NOTES_0.4.5.md -f9554c10f56d41d916330f06175b07f099c9ed1534f00abc9ea7f94be70f4a97 1097 docs/RELEASE_NOTES_0.5.0.md -11a932e2c401c53d117175aa312b6d20508918b12192d37c5084bd54a5ea3a72 957 docs/RELEASE_NOTES_0.5.1.md -d7d007e4c2807698db07b2ebe1cb48c36bd162bf4daad77c9d299096c9654d5a 721 docs/RELEASE_NOTES_0.5.2.md -3e77df12a7ff4b545069933410bf14fe8891f39915182df25112c722cf4e243d 1030 docs/RELEASE_NOTES_0.5.3.md -61f6cbc1c3f263fa96b5c6a70a26baa7cd577d37ac633455eed45d9b63169a35 710 docs/RELEASE_NOTES_0.5.4.md +36d0686bf5760b0d8445cbd1abfc76de71c98d037a1b05d3cbdd4a3e7810bb27 1062 docs/RELEASE_NOTES_0.10.16.md +5b10081a98fab0a0394f5216beb3c2e81d9451796d1c325965e984a4edcef44c 586 docs/RELEASE_NOTES_0.10.2.md +53e4c0d64342715a981ba0f695fa2a20cac22a33839db808816dbfa1a1e0296a 1182 docs/RELEASE_NOTES_0.10.3.md +a26021f356a0b78e4393e14cf5f2dd5752316698ac926c67b7978ebe8859c6b5 783 docs/RELEASE_NOTES_0.10.4.md +cd3f7bd1236013ba9fe0afe0ad8758fbbb9beddaf51872936b2c07323cd65eca 894 docs/RELEASE_NOTES_0.10.5.md +f1bbcb3a61c7b3ef255e921ef016d85f11b1eb2a1dcc7ad7bb8a738efe6e213f 781 docs/RELEASE_NOTES_0.10.6.md +a3b08b9680c5db304c05a0880ac1bb987b02dc20700e4ae61b0e4ebb71d63cfd 913 docs/RELEASE_NOTES_0.10.7.md +3b68776b94c73b72fd069fee7792680bd58523b8a5f34de74216c6255a9fdfdf 651 docs/RELEASE_NOTES_0.10.8.md +753e0b0f2c00a6c8ec687294625731d6c4f158509ac76bd08005fff626943bee 971 docs/RELEASE_NOTES_0.10.9.md +532414fab6a23780dd1fdf9905846582905de9ad2f978542a8376915e73bae9b 1802 docs/RELEASE_NOTES_0.2.0.md +9a79ba9626b852be368afdb687b39e5c12b4674dd716e565c1a3776acd365ef7 6103 docs/RELEASE_NOTES_0.3.0.md +cc9eed982cf7c99af2ccbb8e0dd9fd61f0d494603fc2fe7d14a3288aa4ea0d76 1118 docs/RELEASE_NOTES_0.3.1.md +8498aeb28590640608191add4dcc11f58adcd8d0caafc947cf98019ee557cd42 2527 docs/RELEASE_NOTES_0.3.2.md +48aec5e22fd5392114b8a862f9d2b42c0a891a3af0d935b765706bf21f694b64 2211 docs/RELEASE_NOTES_0.4.0.md +e583003bfcf6563e13855ad1c9eb6ff55f6bb1a618982fb0d7336fe6bf8de22a 1160 docs/RELEASE_NOTES_0.4.1.md +98c881fe56ca1fea2e4a6cc22926fb5345629677a525c87167f835b4d5184bab 1634 docs/RELEASE_NOTES_0.4.2.md +c4891e1c31aeee208855d496053a373ed9cbfd4d8353cb3ef5e4ba28dcd70c95 679 docs/RELEASE_NOTES_0.4.3.md +dc6402c30f48b57d000a207779e659f45319d890aceb2ec34b56c79668b10c6f 626 docs/RELEASE_NOTES_0.4.4.md +6b326bff00dada52d678c1d9da893227f27df2c5835349387477ac41151dbf4c 386 docs/RELEASE_NOTES_0.4.5.md +dcf07ac5b9ef7f08ef3c16631a9af7196c4e7589559eeb3512adfc8b354628aa 1111 docs/RELEASE_NOTES_0.5.0.md +1d89630a53d0d598b4fbf245be46773cef79eff58b3bdca2b79ae9975957464b 973 docs/RELEASE_NOTES_0.5.1.md +2a4268b28bb0ae3dea0b647d1ddada6406f7cccab12844e93d2306e5d5a76c81 732 docs/RELEASE_NOTES_0.5.2.md +319c39f7499e96513031e419501a0b01a4379b06e2b172d0e7d85876509bda9c 1050 docs/RELEASE_NOTES_0.5.3.md +aa00a9f187987419aedefa2c8667f664b4ad0123b3e7e205288d73b5b4f0b4e1 720 docs/RELEASE_NOTES_0.5.4.md 1ecca96cf8a6f01d7ead37d5a6b678549c2561bfd84011b6149f718a25971661 4936 docs/RELEASE_NOTES_0.6.0.md 23150c58e6416d48c2ed6e378fff99179ed810b766ed50b70d4d829c6774b8ef 685 docs/RELEASE_NOTES_0.6.1.md -f3d04f2d3419a7a010d5399cdd9351ff85ab2b3fdf8023977e559b0a5f8bcdc3 2571 docs/RELEASE_NOTES_0.7.0.md -d7bdc61d9b617ad5acf0b2d468eda547fd7509d4af08f33d2661393f25bdcb5a 576 docs/RELEASE_NOTES_0.8.0.md -1e056bfcf2105843402f4b14c63480240cc55456a4a63e229b3fdbaf3156b803 754 docs/RELEASE_NOTES_0.8.1.md -7f1d7c8bc895d309dad2f8ab444d6d2ba3e68c8daa240fecd2abdd9d8a56ba20 729 docs/RELEASE_NOTES_0.8.2.md -c2802fa5dbff392c846b82b55e84a8bfb8e1625546fd1eba39f7129318bece96 654 docs/RELEASE_NOTES_0.8.3.md -8c13279987672314332f648889f52338bcdcb243249f9e1c20fb09d85d7808f5 505 docs/RELEASE_NOTES_0.8.4.md -b516db97a0353babc810c24a87a971d30d72a8021d809e6b833ff7ae0458f442 538 docs/RELEASE_NOTES_0.8.5.md -838d196f3fbbfeee8df375a0502107f56b6df28babca30aa09ef1c7aa5196d09 738 docs/RELEASE_NOTES_0.8.6.md -ef049adcfa204908e6dc3a059124b39ba0e2739cc54e38945ce73a57049df0d8 1185 docs/RELEASE_NOTES_0.8.7.md -7eedb25e1aae3b06a04bb9b2f4843bd6af614418737e600b4bdc9161edabd76a 632 docs/RELEASE_NOTES_0.8.8.md -35dcfda990946480d6d55bd2d2e6360c336260bcd05cdb51d92e07a4e8d76945 1046 docs/RELEASE_NOTES_0.8.9.md -29f7b11fef1e4960ef874f643b2206ca73a310b0b75402bcd3764a01e59db2e0 3114 docs/RELEASE_NOTES_0.9.0.md -ed40e08bac8792f95970bc05e49bce3cc9e288a08d11565a1bd156d787360a3b 720 docs/RELEASE_NOTES_0.9.1.md -01bf2cc72593b10010b667ae017b9eb62f4658a9711bbf24c81f5f95d93fe8c8 827 docs/RELEASE_NOTES_0.9.2.md -25169225d73d22b9d884ab3b5c1625f03fd44e53c7a7a4c4067775e80482c9f8 2182 docs/RELEASE_NOTES_0.9.3.md -720506842e0aeb30c9fc635f86a52a5545556f092e678cf37f08436243244c3d 933 docs/RELEASE_NOTES_0.9.4.md -dd90c81a375f97dfb7fa8f7808db03b19d7e7dafe3818a93537397f57eaae829 2109 docs/RELEASE_NOTES_0.9.5.md -1bf75f25d704dab0c6bc56c639d259f34523f0fb46718dd5a8419a59911ad2c3 2242 docs/RELEASING.md -ac76cb50fabde6a00f28d7e9eccd3ef1129a40665eabdc90d78690a38d424652 4195 docs/ROADMAP.md +d4e43b10b64e1c04a0e444ed39bdfcd05869cf5a5d8db5caa8583578ed2c3e9a 2618 docs/RELEASE_NOTES_0.7.0.md +9afcf47ae2feea72e04cabc08e2a5c058891c04e4a99a7f014d6e9b791d52f3d 586 docs/RELEASE_NOTES_0.8.0.md +674fc8b6c656bd2bfba583388d50e02d0a5c38db4c8396f78d217f4a8b58759c 767 docs/RELEASE_NOTES_0.8.1.md +65885a64005125a24e9d25b70f01dab6d97cdfc8ce017ea0850e913164a5b07b 740 docs/RELEASE_NOTES_0.8.2.md +0f7b3078069a9d7616690fc9aae89fcfa3916eb9b952b24b39ab2ff7bedb6879 667 docs/RELEASE_NOTES_0.8.3.md +9cb2b202fff4de466cc0bcf1945dcfacbda698a0306e293bd97c1a16ab6b9180 515 docs/RELEASE_NOTES_0.8.4.md +82059b894fee48bf9726e9e65c335e221f0c0ccc03a0d27720e918633fbc6421 549 docs/RELEASE_NOTES_0.8.5.md +a4997e09ff6b3ce5a1754ece03ab45fb9da8bfaa61e5c3d970be7aa953f13b99 752 docs/RELEASE_NOTES_0.8.6.md +f28b4e027a6417ada385070eff7436bdbc147f80229c65b1306cf8402f622675 1207 docs/RELEASE_NOTES_0.8.7.md +6b4c9bafcf50917129c64aba13491fb263116ef1a7e9393ed2b951671cecab9c 645 docs/RELEASE_NOTES_0.8.8.md +3a007e5d2081d33769f217f44de3eb4b5b720b564d646a8655910956bfc16f6a 1066 docs/RELEASE_NOTES_0.8.9.md +4e650b94caecc137735a7b27f8a17a907dfe3a5b9a3f9c7541dd6912fc1092d1 3144 docs/RELEASE_NOTES_0.9.0.md +318e665005a8246e49ed74678c09374f03148c96949f8cdce5dfac773f616959 730 docs/RELEASE_NOTES_0.9.1.md +6ec7ddf1290c63bdb1da3dd1f64381f0c92db7d560460f3264ed8f1f23a15f61 837 docs/RELEASE_NOTES_0.9.2.md +1b9f884aeaa030388b2a55b50daaa3dcc525b6771ba50b84908cb25a5437c58b 2207 docs/RELEASE_NOTES_0.9.3.md +bc3fa8731534e0b4f792ee2159bf7cd7d81bbbbe214caf269c5e6fc93f49152c 940 docs/RELEASE_NOTES_0.9.4.md +9c0256fc09525dc63650c1d1cb3afce8a2742a2e033a471595e5fb734bab40b8 2120 docs/RELEASE_NOTES_0.9.5.md +96272da7be735148e8971717f198eea2819aac915105af1533573156aa9d6b57 2298 docs/RELEASING.md +0e44c88c3a1bbb6899864132f55b02770e5ec53cd380eb4319648e25b774e8e0 4301 docs/ROADMAP.md 1ccde232c060395d7aedce27e89a7647b77afe28ab71de0a5a3efeded57369d3 140415 docs/screenshots/deploy-confirmation.png b39506254ffa2c73c389fb4795b3a745368bbeb7d8514cc47a636316d6d9a6aa 107166 docs/screenshots/deployment-run.png 070e6700bdae8c628c907ba181bbf0dde0bbbbb4208f7a875503f933ff1b882e 118819 docs/screenshots/deployment-success.png @@ -92,33 +93,33 @@ ed69b8beb948a2cf9a6deb6c82368e2bb44ffe8d8990a900dc878b0938d1084f 95937 3868ab978de2a7945761c53a9a718aecd54dc791605d07660bcd5cad62a33ea8 103569 docs/screenshots/git-validator.png 007681714895ac062c980db1dda806ac17d4f01019ce9c46491a108d17c2dbda 85338 docs/screenshots/overview.png 1f78414b00ec100af2ec9bf5c9a3e400b6c9bf6dca6fcc317fd951789acc4536 112852 docs/screenshots/repository-workspace.png -5cb9ee0e33a06db1796a740f12b0c41b917c68c1ae7cdb0070936a99c61c2c64 6036 docs/SECURITY.md +11a7bafaa63c7746a938a247b9315e6f54c083ef219504c88d3658cc1b86e98c 6173 docs/SECURITY.md 32a34ec13a284d3f9ceebbc107b25a844e3db096f8cafa4e43951fc2050c9a03 13552 docs/SETUP_GUIDE.md -2fd71e9bcaeb4cb10c3fa2496b7e52fedf70c5b7f871cd587e22dc060c399079 4421 docs/SSH_UNRAID_DEPLOYMENT.md -b6a178215dab054006aae4944b8ffcbe7f6100691c30f08e221e3a2dbff4cd42 2147 docs/STATUS_ENDPOINT.md -0adfeabb98168a7fc0b02bae8d4af436d3c59459012fb05b2216e02265190128 3139 docs/STITCH_REVIEW.md -4983414a980075e6faae687b0d71c8e57bfe53fcb4cadb8b979b8abca636fe95 6654 docs/TEST_MATRIX.md -3c34d42088b18e37d18afc848f91fbe5b74134ca74dd53df1e9eb30753fae750 4433 docs/UPDATING.md -73f094a2f0db3de053e515feb2771cd5a4f3aa4178f2c5f37be01ca65ff1c938 2705 eslint.config.js -c230b931abf2293d2d44b7a69b94c35f1142c093cc46b88739a0de5cbd6d1896 1532 examples/gitea-actions/deploy.yml +080438fd3e5cb17a46baee6f0aa51fc95ca4ba37c55905bdf60fb7cd44fd1ba5 4494 docs/SSH_UNRAID_DEPLOYMENT.md +b1c3f399bddfc488060a88b58043a3faaa2ced67237ad21391efaf6af66cddb1 2206 docs/STATUS_ENDPOINT.md +baa7b621b95a9ad6ca44d7b1ec0bc80f400068e93716a525470b5121f380cb19 3238 docs/STITCH_REVIEW.md +3610e0981257c5dd2455859902b20e7aa4568c3c93a1dfa6475be6032b564cf2 6703 docs/TEST_MATRIX.md +85c74adb8c7d4356b6f696013d911ba9041b8d8c4b8900dcb4b491115ba1fbc0 4512 docs/UPDATING.md +af13cb6d12f31904875cd5bf242a64bd92e15e81fe432fd423802db0f2040394 2772 eslint.config.js +a24c5ce4c7147d286ef26258cb64a9f96a54c6d901e7dd5f925e48779df9053d 1583 examples/gitea-actions/deploy.yml 5d2577d4f9f635a12dcc8795879c079b9e66630bb3d96e21510ef7ee13ebef05 3319 examples/gitea-actions/forgeflow-approved-deploy.yml -4c792cc9fd57ed36da291300c252a6ef75b08a249cf6f2561e23c4c22522138a 1477 examples/gitea-actions/rollback.yml +aa016403cc795880e29d933b60b52192bc73ad8e1d1eb20a93cbe11b4808b3cf 1527 examples/gitea-actions/rollback.yml 4a84041fcf2d7f36d1807e2c19d6cab816f9635112756a675f32cd24d9757fbb 9661 examples/server/forgeflow-deploy -4fe3eee5c2d8705964c24b8c4dd909883a05e7d6eb85629c84b0d64473e0a92b 258 examples/server/forgeflow-runner.sudoers -0423fe2cc7f43fe793986a3f62a395668897cdf07348756aa7742a8cd40ac51c 569 examples/server/forgeflow-targets.conf -106538d4a14a5a7b13419f9520c582b19809e8fafe2cb8c7dce2bc3e600dd10a 397 examples/server/nginx-forgeflow-status.conf +13f5b67c8896d9ae3437bae0c9542be9084347b28ee84b59ab1a608263828cba 262 examples/server/forgeflow-runner.sudoers +9e3dd8267eccebfc02583519ae2ef56b81e781b386d1b92b497d5cfa061be4a7 578 examples/server/forgeflow-targets.conf +afb0480c781c800bf20834d91e36d60dcce520ab90c91c687745abe96bf87e3a 405 examples/server/nginx-forgeflow-status.conf a0de3fe4e09b6f246e1513bccc170334e60f63f98c24377192b4335cbf16dff4 593 examples/server/status-example.json -4a561ead5ba7cdfaf4efce91842a4308c5f2a77980205879d83835efb8a579db 1067 LICENSE -e2daa28bbc01c68c3702add6ea8259dff5920b22f6fdc3c9193ed78a153f2e9e 14708 main.cjs +2033fd1ba7aeb8d2c6377d970516c4b7b82762dfc35efafb4be5a15e298c5e6b 1088 LICENSE +b3d22a6d3222a02144c0ce147a93fa2ebd77c14b1b260503f338284cf9d9d107 15178 main.cjs 91a984a89dd57a084b9a2331763cacdb061582fb590f13df379d92c1a77a2ee1 352 OVERLAY-INSTRUCTIONS.md -63d403ada205000a0dfb158ec57cde1a4f58572d790589428ab5b00a99b32cbe 184860 package-lock.json -ae06416348c2039eb4cafbf287c99342e04176bbbbb718646f160ff29b6af42f 6464 package.json -1237df9ddcbb5ac7dc4316f18c34ff4a7030e3e0d56216ade6dd07369e5e2a04 1353 playwright.config.mjs -7b0d173d0cf5a7f8db807580492bade379dba174a271013747f9f28a3793f55e 12409 preload.cjs -abe5dd6fd68f2970cd19ef134094907c67219061d8fe9a1a08324c78de4ad437 484 PUBLISH-AND-ENABLE-UPDATE.cmd -6d0858d6654c3c3dc7083ebbd234c88324afcebaecd7b772719440a8afbc2e4e 10736 Publish-ForgeFlow-Release.ps1 -33f3c4795705ab77c6e6603c88a32c123b3a286bc77e8e472b76970485699338 4386 Publish-Missing-Binary-Release.ps1 -5d9f13f34c9a9cca77968e472f1829147e51d3795779fa3f766b04cdd54fc698 11437 README.md +1caed6bb0843d7164abcc7280f97427aea6f9cc2424ff159be03fb02f689ac86 184860 package-lock.json +93f2bdaf830eebe78e9f6381c201a798ed80cd7c9a78f788c5cf4904d3e53762 6547 package.json +c36f7f245023e31abe058ece7cc1d6899b83a6cd2c8e42c67fa396fb1085fc12 1395 playwright.config.mjs +3020fb7661321b468a2d4532cb43ef50ec6a38cf973db453ec0c662f823c1da6 12571 preload.cjs +fc4a0cd199e4a6b3a8ed745261b770d8202d774bb1234cb9e074997b8a10b072 499 PUBLISH-AND-ENABLE-UPDATE.cmd +17d6dd3174c9cbe15073031f82ed760c472bb4543c8fc77cf0bc9f15c136e863 10917 Publish-ForgeFlow-Release.ps1 +bf882b8a3ba55c489a76393f65e0f3cc43a74282e8ef04bc31bdf6548495e590 4502 Publish-Missing-Binary-Release.ps1 +a3a6296c4ddcbfd22f01bc9f5a6fdd4a7eec66f3057cded8430a81eb28f956f9 5493 README.md 0f1bf0696ca6a3de7c222a935953156cdd1bb0aa27f2215b8000901c4db2be31 17255 reports/architecture-audit.json 6c50c58f464e2f93fb7255a59d6cbb76354755f63c6f1d4ff14a9a88c8c54574 1758 reports/architecture-audit.md 509c7bcff5280349bd9f45ed6151f70372bad7010a9ea582c13e2ccab91fe0cd 6272 scripts/acceptance.mjs @@ -129,60 +130,60 @@ abe5dd6fd68f2970cd19ef134094907c67219061d8fe9a1a08324c78de4ad437 484 6d46dd6826069d842f20f9f22a99042257db936cdea0bee8d294d2d7ea290126 3893 scripts/doctor.mjs 7b483476ddd909b085335cb78c9b0ffe71939c50011b5fbfcfdef6a340fa7ce8 2032 scripts/generate-source-manifest.mjs 842436680521311594e798848b050ae4e488d0595f0de57315f6ec081c049fb9 1266 scripts/prune-dist.mjs -19417a26a5af967b0f057fede45d1811a6d8ad65a0ed49ad4f5865f598457168 9358 scripts/publish-binary-release.cjs +bcd934f9c085b073dbccdb6fe55c042dc365d12ae7e48afcad11379d9cd32e3d 9399 scripts/publish-binary-release.cjs 558ff442988f1396c174c7161ff5bd3ef0b2f43cfc31459ec7c3967faa146bc3 1694 scripts/serve-demo.mjs 288c4b93f6006c0b32cdf90555bdc0d1d3b61d24a8763fcc30f1e6425ce1684d 1713 scripts/setup-update-signing-key.mjs 431d3d7eabf7e2ea2d5cbb96fb0ddc13f26d85afebcb9692f3e30242197cbd8d 2607 scripts/sign-release-manifest.mjs c76507857292c5713e1c699cf02e24b80265da39af2cecd148034bdb874adbb6 5246 scripts/test-authenticode-chain.ps1 4393f7dc5f417e6d601a68238f4e26791799a3634acec228fe4d79deaee85eb5 3109 scripts/validate-installed-connections.cjs e6127e1e62f39c70ddb1abf72f4d7e7b8e3f19ff1f219e1a3660353c2e0cdfac 2411 scripts/verify-release-signatures.mjs -2187f4a6e5f162b428f123960c8121f671218e1164327c1b4f21bf45a4477d01 22686 scripts/verify.mjs +3e15aadddf71962d938d5331dd32495dc4c3de1f5f235506bec8c2fb42aef5dd 23313 scripts/verify.mjs c2c9e4ba251d93a530a52b2d0079787680261c314083bb99d2356fc177719613 2434 scripts/write-release-checksums.mjs -c8780510ff6e77a16e9c4a88c3c981a0d9d1a4dff8eafd16afdeefbb4b03aac9 1064 SECURITY.md -619515f524cb89960370ffcbd3fafd3c0e178b95f69c5868b1dd44777f23ec1e 2081 setup-windows.ps1 -dd613d04b366f2cd071a1685a414016a5fb008082ed1b4cb8b24b79c100f640a 2412 src/main/audit-service.cjs -e3af59fafa497d032541979bea5fe2b98187b1ced619c567d15ae79ee0904c1f 34629 src/main/config-store.cjs -2fb04b1494b39f5d7c0720fa5fd298cd46fa85dc1b696d77657592347fcf1819 2731 src/main/configuration-backup.cjs -86e9fc2eda66b4b563f6c4bbb87d3e8514340d484fb503b73137e63b6b05c3c9 14597 src/main/deploy-key-lifecycle-service.cjs -7cbfe51973d6607203cb197652ed7f296a3f6b6b644df876957117866a47d802 2159 src/main/deployment-identity.cjs -ce30ddac403d1adf21176e5df21b0cc3db435305d2628f51f1486eacf20df6f2 23708 src/main/deployment-service.cjs -cc2dad2fdac386d41c37b1a8657ae2b3b4084fd8f35a97f8600c082c8d017552 16475 src/main/diagnostics-service.cjs -7f452dc2c0e6f3a00eecf6cb1c2be75906ac40445ef3e104341c0c67208aab2e 2397 src/main/external-tools-service.cjs +247af21a5d7b42943ac5f6d297366f5e042a15a62c0c616872b9dadc7e47aa0f 1072 SECURITY.md +2785092555fad70fe679d1d15c8bee735705676c737a1ffcfc022d8d01999902 2128 setup-windows.ps1 +fd5c733f9faebd26f5fb14f38bef99b03cc71452bb8ede7d184c8eef0c0bdf78 2469 src/main/audit-service.cjs +8f5b5f7cb197f7e0619f3ca14f89760222155bdfc9e4eae81b5182354c87c82b 35714 src/main/config-store.cjs +9223757fcbf46fab6e4dbd60333bed78b771c25f3fe4824cf80850a46ba43b8d 2793 src/main/configuration-backup.cjs +1c74a88f5ee97063915eccccce854c7d6433f38800ff99fda732a092c649bd16 14788 src/main/deploy-key-lifecycle-service.cjs +b18f5cddbcd3eb1448ae227bddca7bd2d0866c3e309d852fb0ce45f0815eac3d 2194 src/main/deployment-identity.cjs +a0284c366693b42d373794e55eec83bf5f6c500b95091b2796a283c1e69fdcdc 24135 src/main/deployment-service.cjs +774a6f4370e75bf086e04e7b4b7961463d97d798c2512525458dbaaa5c008140 16860 src/main/diagnostics-service.cjs +5d70b96d045820891d3a33f2fc5d54b0d4730bdcf82cc0ab32149b4d3328eb64 2448 src/main/external-tools-service.cjs 76fdc5576dcd6fdb88921009d4a923854650bd5efe5b837cd7438eba0dc733c8 48002 src/main/git-service.cjs -e28fc1ca2fd4c0116148f5005d793feddf04c36ef711d2d348560394d209a613 7253 src/main/git-validator-policy.cjs -3a101b63ad3761c26350c2ac0793279a0b27672b91a5b1d8dc75bc44d92f0b52 27128 src/main/git-validator-service.cjs -3cc53e24e023aa0d8bf36c35ce9672ca98e6c74066512c8b59ab42274e838c22 21307 src/main/gitea-service.cjs -2ad3b2e647377f687ad987fe248a142ad399ecac98e4b49965aa7efc6093e5fa 6914 src/main/inventory-classifier.cjs -dafdb09133d2b6ec2161a3f0b09354551e54fc606c8107976fca37405643be91 3404 src/main/inventory-review-service.cjs -98b332589f86a4874a8adddc38e7844a4ddbe9360d38f9f77b2e95d58d748016 25720 src/main/ipc.cjs -26efebb4c147ed560966e7e60e64a013b3476327b3bbdb4e4439949142fa7846 2250 src/main/ipc/channel.cjs -748cddf497b4c204e5e6fa1bd049991a086fdfb38afe342e6b3617c85a111478 12467 src/main/ipc/deployment-handlers.cjs -dc9b5971c9fefe8c374aa31916f5513601ce86003fd48b1d0e51330a909ae3a5 3442 src/main/ipc/operations-handlers.cjs -8072252821b1245d121eac534a18eeb64f0d7d18429e272e21a6e90b010005b9 17272 src/main/ipc/repository-handlers.cjs -fc7156aabacb3e85a4f220c490f94e9836e07fa5350a1d9e64f84f835ef51024 4961 src/main/log-redaction.cjs -958595a99fb242c127f475f3d8622bdba4c07b2d658703f69fe3992227a9107e 12909 src/main/preflight-service.cjs -720c4a0c554f46386d87c3ab6607d1fbcae66e50b69483c7dbba169d5128c851 680 src/main/process-error-policy.cjs +871553beef7613d30493a9af9fdcac4d3305c0d89ae96cff8050f310d4865ff0 7340 src/main/git-validator-policy.cjs +e4384b175d2ebff809581861a8b7a950c2bf2780118f3610ca5f9ec673fbb617 27727 src/main/git-validator-service.cjs +0eecfff92532523990bf4a4bf2fdd6f9f1150d9c453706cdadf003954c90a162 21930 src/main/gitea-service.cjs +2246cd52935cc4b5546a1412f1aa2e33be99da4891be588da95644cc6d1ee8f0 6997 src/main/inventory-classifier.cjs +180f142fcdf41c7c458bbf541a0c2c6e337d99555591593732bc22272b36c43c 3435 src/main/inventory-review-service.cjs +d618f9cd1625e291d1f48cad665b38cd5ef322214a1d293ab8c28dd1162d688e 26441 src/main/ipc.cjs +619e89f4489115f60d7cf858e3dac6c6b3e562ca7439e2398e66ca90fadb46d1 2327 src/main/ipc/channel.cjs +a2fb14037189bdad1f2913a713d04f8316d5ee60942dd0982f026cff9aa3ac8c 12751 src/main/ipc/deployment-handlers.cjs +c38777b4fe0711a404003765ec4f4032f353d4c01622fa17752b96f5f41ca458 3542 src/main/ipc/operations-handlers.cjs +64c6dffcb232c547976a5ed8c98db4b5225eee10bdb650c8aaaace8eb3b67792 17722 src/main/ipc/repository-handlers.cjs +0ae045dab3165a05a518e9a0aca4aba972de3da3be301f219512c7d198e59008 5062 src/main/log-redaction.cjs +f819385c391b24dfb173d0b9befe82edcc1fdd26492a6fab7b168d03462a4daa 13117 src/main/preflight-service.cjs +31e449c00daf48639fdf3effddee52e5fc5f8ee4dc27c57cfe9212e6418535f5 706 src/main/process-error-policy.cjs 3096b4181566cb93a27e56e248c92105d4f4df5aee39d73c6c7d8ae8c2231bc0 1570 src/main/process-runner.cjs -e64f7257d478955c675a133b3735b6afe138a69d2ad090898061e56f557c43e5 9926 src/main/production-acceptance-harness.cjs -27bd6621c731545ec46d8914e9408c89928a8ce563b40eb4bcd8a516662a54d1 8716 src/main/repository-monitor.cjs -6393583911263575c6e2a19d9baab6e638cce90252c386b0a5144f2fb6f81f15 12154 src/main/repository-service.cjs -52b6d88ed1f5c904a13cdde92e5f96d1e2b5971ceef49862152197353cdc6490 27928 src/main/server-inventory.cjs -793003566823e1d5c02283f583888ecc07e44477525620579b3d858f488b3c08 22347 src/main/ssh-service.cjs -19538a3c40ea3489bbaee9a23af36a5e99962af6bb3d04259f05ece6588cbeb2 25901 src/main/unraid-access-methods.cjs -5621e35323e4f81fb14a05670f81579ec1e66bea3a55fa6457ece0f807421424 9801 src/main/unraid-deploy-key-host.cjs -6d9910dace52625f88e066a8485af2663c3735ff15e9ce9031441ce742710a21 30793 src/main/unraid-deployment-methods.cjs -673b1692e7c2b5197545df98750b5d048bddf44206263e25be4f17d9bf900e2c 17208 src/main/unraid-deployment-service.cjs -bb4a99c3526fcf4db4fbae88a058e8598fd10a87990e7d502bfdc765328bdaa1 42766 src/main/unraid-inventory-methods.cjs -2c0cf07921ca7ee5a9085ced44498c2e6798e5cc1e8a5ecf704c3cecabe39a25 27607 src/main/unraid-preflight-methods.cjs -d45220176aed72d692f9ae5534f9d40bcc359a2d08e025e74a3b3b505b8b9ed4 16559 src/main/unraid-runtime-methods.cjs -4c5cf01922e1feb36a31b50af22e973d8aee3fecccd406e449690604111898ac 11608 src/main/unraid-state-methods.cjs -29b8c5eca83b0e89c7d0716945b5316aac43947b5387e89562d9a024ebc4663c 27204 src/main/update-service.cjs -b5c304531bec358d059189a27cd9db8fa20cefb7f817e5eb0287001f7353f6a7 985 src/renderer/actions/command.js -d0bf607dd1de9d55f2947d0adf0997cd3ca5c269d10a5362cc1d8bc4d1a2a8ae 6706 src/renderer/actions/deployment-operation.js -0db283b1a458ae0b31538940b1ddc931ffdb53bd04ceb7fd8903813f9200d071 17978 src/renderer/actions/deployment-profile.js -48bed91dd2a85bb51ee7307f7acc3b79c881ce8cf63b22ba79d5d079b265eb4b 7785 src/renderer/actions/inventory.js +bc9fbb70cc5cc51cbf9115c610fadcb61e83316a69ae3862bbc2f013353c1e4b 10075 src/main/production-acceptance-harness.cjs +538ec017ee855b6585f1fb4efb88d828500b75545fccaacf66160a3d76d8a63e 8945 src/main/repository-monitor.cjs +a17983bf15aa0daa96bdc692e136386b3cae79b878e76694f19eab9e8aea2ace 12457 src/main/repository-service.cjs +a80440baafc3655dca2c6b5a5726e80368ac686015c7c184c5cc0353e807376c 28505 src/main/server-inventory.cjs +b344669439fbc6ccadf77277119efb10f200fccf2c7ea417e2aae83456acae4d 22859 src/main/ssh-service.cjs +79e96d402d8e7fddef722ebb9e528ac4a031d0286a994c0a2d3b8f21904ba0d7 26362 src/main/unraid-access-methods.cjs +ee87b750d89f8df9ea4d8d7edb852b4681b3f826263bc8360d06a1e1f80f82e6 9880 src/main/unraid-deploy-key-host.cjs +518c3f9d017923407b9ceffb5132caf99cae2a3d5a103d21b303207893d38067 31375 src/main/unraid-deployment-methods.cjs +b6cd92952b7fb2cd6f03301f78c9c6bfa962d1f0ddd56cc3931c7688acc538ad 17732 src/main/unraid-deployment-service.cjs +d2d76767c05bbd604e8e557e1ba06ceba12305096fa73c8a9edbe439f2eb8fc2 43475 src/main/unraid-inventory-methods.cjs +aa2b8681d72dc9c232ef9436854da9967ebef35d6a71c66ff6f9a566ad031c06 28229 src/main/unraid-preflight-methods.cjs +78fdb88c0ab376233c114b116559af26c47d83fced47c7a0a0b7248a0ecff8e2 16946 src/main/unraid-runtime-methods.cjs +a3d3c0327f9120ca956735bf4e63a61e0b48e5b120a2b9fbe7b47d8bcf69b286 11901 src/main/unraid-state-methods.cjs +0bac9bb0e30b7ed9b7c37fb4453a7a8d612a66b49caadc9546e0799c09774d98 28795 src/main/update-service.cjs +856119ff96dd343f5460eb830a586684c1dda7468ddaec858d38d960614f1a42 1007 src/renderer/actions/command.js +6ea98804892017a27450047c6fc5a6193cd98b6f56ded9880eb02c06393683a1 6889 src/renderer/actions/deployment-operation.js +d58d8fed4128d6c512fc1c6cac42dfdf5878380cabab9f068abc371d29036d27 18385 src/renderer/actions/deployment-profile.js +3efbd97d65ecd74aa30c7ab51c7ddd3da71c3b9f6296597a51e3d921cf7930e1 7970 src/renderer/actions/inventory.js 9e8adf1ba89ffc61a7b595f813c784688bdf50daa259204d74b2cdaa81650895 15493 src/renderer/actions/recovery.js -2414a0d29a0380d343b9b0e58ba1909e7a7eeb46357fd45ddbb3ad411d119f78 16280 src/renderer/actions/setup-and-settings.js +6c26c3604344230df8ee13129526a271b76db48809d02d4e9ff1e3db08dbe2ee 16720 src/renderer/actions/setup-and-settings.js 058722de35ba33bfcfd29d355a75e1513a2be80c572773472cf9816dd13f894a 20148 src/renderer/actions/shell.js 0d48993bc26ae28bdab5fbfa8d9be4ef896efdb9a5c34094087721e4274593b4 27566 src/renderer/app.js 16efd2fca83004f781eae40ae0f706a004ce0bddf338dd087b8adf7eb10c1d84 85704 src/renderer/assets/itworx-mark.png @@ -190,70 +191,72 @@ d0bf607dd1de9d55f2947d0adf0997cd3ca5c269d10a5362cc1d8bc4d1a2a8ae 6706 094c1b71cc2482a9db250ac175f45f3de68f53277dfbde371a03e61923d00988 75240 src/renderer/assets/itworx-wordmark-light.png 813b8cdeecac43794166f3db9d3c5d2c441e0292f9ab7bd465ba136d6201e95d 82476 src/renderer/assets/itworx-wordmark.png f826ab1f2f35882c59995497219fcfd500e46a94dac0906ee47fb732e8023fb4 55633 src/renderer/dialogs.js -dede1f21a06c73a2c2a462a869d27530d85f99baff202a2eb509c57436ad6aec 2732 src/renderer/diff-view.js +196ee9c174de6afaae524d6e1bc7c5fccc8165e653adec44b12627f3be2af42b 2772 src/renderer/diff-view.js b7698de13b872aa80d27b0a4d977c12ca2303b2246f05e6af4223db9b727e525 7433 src/renderer/events.js -c4a71213d412166093f7bd8254b847de4d8beb58c1aaa356a0cdc8d728080326 1524 src/renderer/index.html -06180d9656dd254edfb6949c397f8e313954fc560ddcb22b3a35fce3c3e35655 21350 src/renderer/mock-bridge.js -870024aff376826a92c9cf7452689cc1ecc5d9034f055bea56734f3f7fcea5e5 28703 src/renderer/mock-deployment-bridge.js -ee33d1a77ab7152cb4f3dfbb611011f755a69ba1afb1016a28c997fcfdca97d6 25810 src/renderer/mock-repository-bridge.js -94fa265c2fe9ca8d644f0ce9b620b6f85d9b25dca5802c4e9195b66dcbe80120 6522 src/renderer/operations.js +4eae9d462d04b6c65399a13ed679fccd6fc0469b2da97ff6861b932486319621 1561 src/renderer/index.html +aee36aa371a9c6ba2b85a1b269a5d43b0a5edb05c1d89aa5b7748b656ee92c2b 21951 src/renderer/mock-bridge.js +9853a4b17e000efa81d76596d7fbdc7277103811302061fae7a0caf6085a8a0d 29408 src/renderer/mock-deployment-bridge.js +4a314d7a0fa00d84c8431ade6d598084ac0fd6ded518f035029f230f6f03a1c1 25815 src/renderer/mock-repository-bridge.js +297dcb573c61f553c82fb5fad9dae82bc6f1fe958b2b026a49f1dee0fc7600c0 6733 src/renderer/operations.js 9299c83e43eef194bac2946c43b2ffda6309ccbdcc5b9ce1775e668ae7f172ef 92319 src/renderer/styles.css -9ee96e6267d923448a45eb0a02d5352286400f2d7b4a006ba681b6806f2e1424 113808 src/renderer/views.js +a4ff14882d0fe3f1f467eb9e263ad1a984b065d1534e14376c42d755a7a0f689 113894 src/renderer/views.js e9e72c072a5c5d04f59cd6763de0cfbf736c2a5ffa2f722143f3bad2bdbc630b 1411 src/shared/clone-target.cjs -5d425d5c2f939d0f6beebee7ebb0c77146cb7e318535ba7286ec7081a4dc2269 2497 src/shared/deployment-policy.cjs -029e600229714d033c28e2dcb77817aa8269847001782ae0012960e83ffd183f 3057 src/shared/git-status.cjs -2778ebcbdf60fdc1cb0749f15565e0e1bd66f3a0d31eb70ae7942a7511a3de75 1295 src/shared/repository-match.cjs +7d194738a75be91182d558dfdd22fdc66e8ca9713dcc9622605b9c49c59eaa90 2541 src/shared/deployment-policy.cjs +bc13c4d35579e2c64dfd8c0245c48ca4f8bfc8bd1a80210821f4366b799764a9 3150 src/shared/git-status.cjs +59b4c20d3cfdecdeb8f2126b5e525f2ae99b26a53a3914a2a7a63bbc1cf5643d 1099 src/shared/release-policy.cjs +98bf82663ecd159c92eb3d4a9d05996797103e620cd9017f9ccee5c614c35ff7 1334 src/shared/repository-match.cjs c7e120ea53c5ef3c01b8cce71afe913f34bb461bb73aa3ade24656e09f99f338 1152 src/shared/semver.cjs a31b275114a2ac376f3f8c69f4328286219767d22024ddeb01070550ad62109f 3189 src/shared/shell-verification.cjs -2daa98fd421598bfe5fc9757c9b6f4d82c31d1bfece15829928473581d5d2639 1210 src/shared/tool-invocation.cjs -ee73fdf9c591c029243385cb2d2085c3005c7b08c5b9e1b89102201f0ab30759 5702 src/shared/validation.cjs -13b731c38863b1007b0312fd9d89562401b7cce875c952f52429bde74f77a8af 3096 src/shared/zip-writer.cjs -f8853dce6fdf360d5df2fbe2b6df3e5687630c807fee5ba8436679b34ec737ea 2436 START_HERE.md +f6acb9c9a3cb9ca771d9cfd133babd8132445322644fc23082313dd1ac1ab2b2 1252 src/shared/tool-invocation.cjs +f2bd787532454b7f52a19d4161458ced05b3496ceb37ef3db4db84a67a99393e 5832 src/shared/validation.cjs +cfa9298d5ab390f5f1ad8988c73a157e8bee1c2854afc58c4fa0941cfe1da871 3187 src/shared/zip-writer.cjs +39260d5268764844f744278f99a1ce934cc3bf3e2f5eb56687122bb75482255f 2496 START_HERE.md 058aeaa5d9bfe377c7e322f213c7871ecc4151b5d08ef790992f4ee28d857658 743 START-FORGEFLOW-OVERLAY.ps1 -f5b0ea887fcdeadec78c1ad49b0ec7979723562f5c0b730703acb77a37281ee0 1009 tests/acceptance.test.mjs +1efc658df6e29f5db5aefd3c515115357d33fe7d920e37e1a99a118251babeee 1020 tests/acceptance.test.mjs 2f2b21754dccd8b734d6c7bd4fdd655df79c7739a1de140e562520c8234aa7a2 2854 tests/approved-deployment-evidence.test.mjs 720ff5b549a3dd70854eb1bac3589c77a2019a61148be8e41e112196c8821ee3 1079 tests/approved-deployment-one-shot.test.mjs -a4e5947204ff6878e601e32477bc85b53cd0153baf95a161c8935b6e5466c257 1155 tests/audit-service.test.mjs +17ce23545d113267f414173ccd8cbbcc8e6eaeac4a831c5d53f37d7946775905 1180 tests/audit-service.test.mjs 6e119cda76b2ee36b93623d98f41371798227f9b3f7c20fbef035a7d7a50cc95 19402 tests/browser/forgeflow.spec.mjs 1728c0a7abd92f4d7d9e68df32e4a6b00730555f23795e9b36416795d9d127af 5978 tests/clone-target.test.mjs -8aa8789a984769b377f719abca42a428fffc4f89b3997d57184a8073d24121e2 18325 tests/config-store.test.mjs -f1463326aee79842d265687ae628189ce54e92544600f2bd14073780287cfb14 2502 tests/configuration-backup.test.mjs -144c8e217a334cd69f502938d944e0f2dac61703d5df47e287b9ed542918c779 8129 tests/dependency-wiring.test.mjs +1d85b0bfdd47d3f645904d4db85e1699addd6a0f02ed6c71fa4fe4b568fd21ae 19513 tests/config-store.test.mjs +afc181d00bd191f3e8d8074c9fa382d29ddcc1d4bf9186f8f6395b93e3725f14 2547 tests/configuration-backup.test.mjs +a460d1ebb731c89ef0be9a4679604c73d0151e44e24da94788c132c3b298bff5 8294 tests/dependency-wiring.test.mjs aad5948ea374d1e56e777005c73639654c96a90364dd398c949052cf5ae343a2 11130 tests/deploy-key-host.test.mjs -b7e009fed4171d6dd6b4c3154ba1d3f7198e98f5b79b298687841fc8169447cd 9354 tests/deploy-key-lifecycle.test.mjs +636c62293a576e62fbeae3adca3ad6e1345e68da0db555dd3bfde3a532066bc3 9493 tests/deploy-key-lifecycle.test.mjs 49bf9cf9842e7899015013675208f83a95402065a082320927a677ee4bab0766 24875 tests/deployment-operations.test.mjs -1dc6477bd07de78be189e6e8195ec339eb9d75820c4dbd5b073b8520ee21f6b5 1938 tests/deployment-policy.test.mjs -bf4576901e32662d832687a2761852aa1b2cffe256de5044f18c6637c189463b 9780 tests/deployment-status.test.mjs -9a97e79618393d9f9818cb958bd038e0095489331fba0b29de313aaaaa1ce30d 4064 tests/diagnostics.test.mjs -b63eb5bcd89c34629386c745e80c2f83f0709ebce62459b583e665d0a99654c6 938 tests/external-tools.test.mjs +41589cf470702c7a5af966a096be7ec469c8cfb6133957ec4f4d7ecba395a152 1967 tests/deployment-policy.test.mjs +e8724cf72de796b763acff18aa01ea95a4ff5b2de211246ec89fb8c67d079e54 9823 tests/deployment-status.test.mjs +34d824c1bee1b1756c279c938ece61a5b7e4b0fd796ba4c0a594d131e2f1ef0e 4142 tests/diagnostics.test.mjs +9f862a67d93edf4adc7c8b04040f9ea56394b56445a70cfd658b8def6cd336d1 952 tests/external-tools.test.mjs 26e94450c6ab1dd0d5149d6812e66814a719f80d6f95fcb3a9dee7a3d7f46293 20559 tests/git-integration.test.mjs -5ea94c6b241a02060d531fad94e449eecd3772eed2137581d4e2babfb09e56db 1239 tests/git-status.test.mjs -61e0b8cad926acd22b5b17e4044f7edcbe96b6977cbbe2b6fbe123406626fc89 4283 tests/git-validator-policy.test.mjs -2b31459f14a5e36e30cf84c1054f634f4dba8676d29adeb9c2a8e18179f56fa0 6097 tests/git-validator.test.mjs -681ab7bcd02c4dd98d1d8d2092a3521c489d941131e7ffe5903971b940046474 2403 tests/git-workflows.test.mjs -d633c59bd910008223c834c6d7f3e5666c685a0881944263ede2d42cc69d3151 18710 tests/gitea-actions.test.mjs -fcc9a063882840dd89d74c2785284c8f2f6a9e5acec482b6d89ed8de62efdb85 9635 tests/inventory-classifier.test.mjs -62b90c21c15b841af30d26ccb0b9e88d25674fa7dbff9dc231dd8a1dddc3d657 2025 tests/ipc-contract.test.mjs -5c66b01ab11585aab6d923a9811ec76eef34e918f1a7f37227edd3f4337c932f 2981 tests/log-redaction.test.mjs -96432a97d313f331694900bf0a2c21e38c20eac96d59147977aeed9055a9e3ad 2287 tests/partial-staging.test.mjs -1b6c920e18a248f78acaed6187197c88ec8d911b62d5e2a9f8ad57b91ae80499 11827 tests/preflight.test.mjs -7f2751ea2621f76b5427f442e931344d13e97faa7b6ef3151949bbd6a03097cf 1205 tests/process-error-policy.test.mjs -0cb884cf62c1cb02cf59a81662be055bcb5339d176de85e2a3eeb8e8573e11b3 6435 tests/production-acceptance.test.mjs +cd294dcaf050d639472cb1f9c1a48484fbc74271e527bf9d8153b00e903e2101 1273 tests/git-status.test.mjs +8ac410d7173bfc3e4b967138d2d6343fb1796b2cbde4fb538b8a38b801377d24 4350 tests/git-validator-policy.test.mjs +8950162b8ab1b644bca230cf9871f64e530e6d612a9d89a942c3e49b686fce30 6239 tests/git-validator.test.mjs +eeb7ebc5b2deb882590f8abca3ce76a6e1f9ee26e75d37d3ed1d753790785973 2449 tests/git-workflows.test.mjs +4e9391976989b302d626fb820738d49622e3bc20ad46441685015addc180009f 19052 tests/gitea-actions.test.mjs +f7d9e24146ac87a180fd60e0a2514c971eaaac9001014f7d63336281aae7403e 9759 tests/inventory-classifier.test.mjs +b73b49e177e0436988d4d38132ea008a35290187ee33deb289b12b621923caa2 2074 tests/ipc-contract.test.mjs +c6614369c43ba42531fea6d365187d1a579018374b2fd5c317b4cbc902d1cf61 3067 tests/log-redaction.test.mjs +107d5eb14d1733709f05e817ef303b4c592470b6f9fd057fa804c9a1e2a10a7c 2331 tests/partial-staging.test.mjs +d5433897838ea42146cfc15e140e55d1f254e72186a0a5f50d2d43d50490f33c 12004 tests/preflight.test.mjs +070f2857e70d2b36310f2636582ef0eec49f398b3f009bd3742c6c9e676ba508 1231 tests/process-error-policy.test.mjs +0abe5fcea0ab8769188f2131e99301979d4f4983cf9924266291bc716c9e5d33 6564 tests/production-acceptance.test.mjs +6f26ae12a39a4711cf699f1a68e8f673e1e53e2cc34f5a6f362a66ae15ba9d1a 1229 tests/release-policy.test.mjs 11fd2029593c0f4e5c36f1ce8572734f8ac9afead5abca7f5b619c5814b40a6c 12602 tests/renderer-workflow.test.mjs -2b4956fa4df4624a04117737e57ba74020564330ff71303b5746d8ccc881e880 854 tests/repository-matching.test.mjs +af43f29c5c1dd78095a3a471b904964c613f1eb567310ffcfc432cbbc9f8f986 872 tests/repository-matching.test.mjs 4defa3c5f21db7fefbd79397c96b6c231a4330df60b54c0fea7e91412e336fd3 6237 tests/repository-monitor.test.mjs -5476f3ba90bc096d4172900d9b54ada7c12da521f8627913d87794eade3cee23 13494 tests/repository-service.test.mjs -5fea04e668344508fb4e16da9bb6fe8733e2b83d1c227acb3421e51da26b2ffa 3636 tests/security-validation.test.mjs +d4d2f9e2f6e7c672273a4126966f739c10d584d9e976d8630fe4b988c02dbb47 13784 tests/repository-service.test.mjs +1e4807cbcb19f4dd7787dc1779e3b60a6462989b13bdf482b38a489a756b0b5e 3639 tests/security-validation.test.mjs bab853feb0e22aa25af17989baaa632c01efa636533ea67407fecfdd973c7024 627 tests/semver.test.mjs -12cb3b240bdd0922566323c0014838ca067ad10d9d4009943165ae2c4e93bc6f 11786 tests/server-inventory-branches.test.mjs +76ec40ba206203c89ee41212b75f53159a86ef94af9c64ff3fa204b160cb37eb 11936 tests/server-inventory-branches.test.mjs 5df7f331cc1120a0914f5ddbf39d9a6b83bd5ada70a9953b3f6bd0701ba2485e 4394 tests/shell-verification.test.mjs -a39d30f47813dfb98c998811f3d76ebbb1544ecfd017a165d44f9afb80d7daf9 9090 tests/ssh-connection-pool.test.mjs -7ee9166327ed227d2b7c6929692dea5c5d7a41c3e566596fa92d9ec4f42e8677 4085 tests/ssh-connection.test.mjs -c9354e4bf3720c28cff21c15ff8b9474ba4a23b7f55389de4326f4dffde54d78 9510 tests/ssh-service.test.mjs -8a6a8477eb94b85ccef18cddd2640afb0d1eafa679c96bc7de20428d5d69e1be 1794 tests/tool-invocation.test.mjs -3e4a1a6d6a744df9badcfece2cf8d09f8c34efb3c437cb08a6f2e6c9d428c0d4 59353 tests/unraid-deployment.test.mjs -05c0ef13fa2fa977174fdf8bdf76a7d606a049a43ad98901079cf5545d54d18d 31426 tests/update-service.test.mjs -9cea5c1d5ba3e0972a0b5c7236cf1f7c5616373e0a39ea4a492ecebf70452e40 948 tests/validation.test.mjs -7ef4d4b9f5f3e6979293b29d571ce0e39f83197f3cade2d999a9cea7bacdd84d 1781 tests/zip-writer.test.mjs -8f36b542736f2933bad8b9464ad7fa37b68196009c81cf702ce3b677cd637dea 767 UPDATE_FROM_0.3.2.md -2ebde94f664d86f42aea9bb3112b70b272c6706f4d364cad2f5c6191d2873e98 1655 update-windows.ps1 +977fc36c38a3af16558fb2c3b2b38a9466aaf08b0e7234d4cab354dee181b4b0 9345 tests/ssh-connection-pool.test.mjs +0149be4165bd5379c8324813cfe536f1620a5c324bead43dd0f463e63bb84d08 4183 tests/ssh-connection.test.mjs +259f4952baea6e4631f1670c2dfc1cf2e2b4c4ec670a691be922a3784c294491 9667 tests/ssh-service.test.mjs +c61d8ef97ec7f63f3ba0f7bbda11ba1d1bfbe1a5fd85caab2bfec612ad393aa0 1843 tests/tool-invocation.test.mjs +8df71b18f53ac6fe4cb8dc11d526f66c4db374ef9f738a6d85bb5ee2de224515 60887 tests/unraid-deployment.test.mjs +c750272ba4616f868b3f5a8b516674342b06b4de7eb85aa4461a107da084b6d0 32655 tests/update-service.test.mjs +9ecd063698bba4c49f308617399d6ad9ca87946f9ed885412f5a71fb0ee424bd 970 tests/validation.test.mjs +b9b5ebe3ef0d15f5d6d45d2e8bc49097b59633e7684e72a1f8fad084e6010746 1822 tests/zip-writer.test.mjs +ebafe424ed9dd3d3558949bfcd523352565102da4221769187dcacf4777b4977 786 UPDATE_FROM_0.3.2.md +c2ea145fd3dc55cc82ae2c975d48e3aee1061fd184ca2a688b498a91743a8a2c 1690 update-windows.ps1 diff --git a/docs/RELEASE_NOTES_0.10.16.md b/docs/RELEASE_NOTES_0.10.16.md new file mode 100644 index 0000000..93ea7e9 --- /dev/null +++ b/docs/RELEASE_NOTES_0.10.16.md @@ -0,0 +1,11 @@ +# ForgeFlow 0.10.16 + +## Signed releases from the public source repository + +- Packaged updates follow the exact published release commit, so later documentation or source-only changes do not invalidate the signed executable. +- New installations check `Jens/ForgeFlow-Public` for Windows updates. +- Existing installations that still use the legacy `Jens/ForgeFlow` endpoint move to `ForgeFlow-Public` after installing this bridge release. An intentionally configured alternative update repository is preserved. +- A version change in the curated public source now starts the Windows quality, build, signing and release workflow. Source-only updates do not create another binary release. +- The publisher refuses to replace an already published version or attach assets built from a different commit. Release manifests continue to bind the executable checksums to the exact public source commit and the existing Ed25519 publisher key. + +The legacy repository remains available for older installations until the bridge update has been verified in the field. diff --git a/package-lock.json b/package-lock.json index 0a116b5..f4abf47 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "forgeflow", - "version": "0.10.15", + "version": "0.10.16", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "forgeflow", - "version": "0.10.15", + "version": "0.10.16", "dependencies": { "ssh2": "1.17.0" }, diff --git a/package.json b/package.json index 82ee272..4e15c12 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "forgeflow", - "version": "0.10.15", + "version": "0.10.16", "private": true, "description": "Desktop release cockpit for local Git, Gitea Actions and controlled exact-commit deployments.", "main": "main.cjs", @@ -9,9 +9,9 @@ "start": "electron .", "dev": "electron . --dev", "demo": "node scripts/serve-demo.mjs", - "test": "node --test tests/*.test.mjs", + "test": "node --test --test-concurrency=1 tests/*.test.mjs", "lint": "eslint .", - "coverage": "c8 --check-coverage --lines 85 --functions 85 --branches 68 --statements 85 node --test tests/*.test.mjs && npm run coverage:modules", + "coverage": "c8 --check-coverage --lines 85 --functions 85 --branches 68 --statements 85 node --test --test-concurrency=1 tests/*.test.mjs && npm run coverage:modules", "coverage:modules": "c8 report --check-coverage --per-file --include src/** --statements 60 --lines 60 --functions 50 --branches 36 --reporter=text-summary", "verify": "node scripts/verify.mjs", "dist:win": "electron-builder --win nsis portable && node scripts/write-release-checksums.mjs && node scripts/sign-release-manifest.mjs && node scripts/verify-release-signatures.mjs && node scripts/prune-dist.mjs", @@ -124,6 +124,7 @@ "docs/RELEASE_NOTES_0.10.13.md", "docs/RELEASE_NOTES_0.10.14.md", "docs/RELEASE_NOTES_0.10.15.md", + "docs/RELEASE_NOTES_0.10.16.md", "docs/CURRENT_STATE.md", "docs/MUTATION_MODEL.md", "docs/RELEASING.md", diff --git a/scripts/publish-binary-release.cjs b/scripts/publish-binary-release.cjs index ba556a6..0e444e7 100644 --- a/scripts/publish-binary-release.cjs +++ b/scripts/publish-binary-release.cjs @@ -5,6 +5,7 @@ const path = require("node:path"); const { execFileSync } = require("node:child_process"); const { app, safeStorage } = require("electron"); const { normalizeBaseUrl } = require("../src/shared/validation.cjs"); +const { existingReleaseState } = require("../src/shared/release-policy.cjs"); const root = path.resolve(__dirname, ".."); const configuredUserData = @@ -88,7 +89,7 @@ app.whenReady().then(async () => { "Release repository owner", ); const repo = safeRepositoryPart( - process.env.FORGEFLOW_RELEASE_REPO || config.updates?.repo || "ForgeFlow", + process.env.FORGEFLOW_RELEASE_REPO || config.updates?.repo || "ForgeFlow-Public", "Release repository name", ); const branch = safeRepositoryPart( @@ -143,17 +144,10 @@ app.whenReady().then(async () => { ); } - if (release.draft !== true) { - release = await api( - baseUrl, - token, - `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/releases/${release.id}`, - { - method: "PATCH", - headers: { "Content-Type": "application/json" }, - body: JSON.stringify({ draft: true }), - }, - ); + if (existingReleaseState(release, version, commit) === "published") { + console.log(`PASS ForgeFlow ${version} is already published for ${commit.slice(0, 7)}`); + app.exit(0); + return; } const binaries = [ path.join(root, "dist", `ForgeFlow-Setup-${version}-win-x64.exe`), @@ -172,10 +166,6 @@ app.whenReady().then(async () => { const existing = (release.assets || []).find( (asset) => asset.name === name, ); - if (existing && Number(existing.size) === bytes.length) { - console.log(`SKIP ${name} already published`); - continue; - } if (existing) { await api( baseUrl, diff --git a/scripts/verify.mjs b/scripts/verify.mjs index 031112f..f18c700 100644 --- a/scripts/verify.mjs +++ b/scripts/verify.mjs @@ -97,6 +97,7 @@ const required = [ "docs/RELEASE_NOTES_0.10.13.md", "docs/RELEASE_NOTES_0.10.14.md", "docs/RELEASE_NOTES_0.10.15.md", + "docs/RELEASE_NOTES_0.10.16.md", "docs/UPDATING.md", "docs/DIAGNOSTICS.md", "docs/DEPLOYMENT_SETUP.md", @@ -136,9 +137,9 @@ for (const file of required) await access(path.join(root, file)); const packageJson = JSON.parse( await readFile(path.join(root, "package.json"), "utf8"), ); -if (packageJson.version !== "0.10.15") +if (packageJson.version !== "0.10.16") throw new Error( - `Expected package version 0.10.15, got ${packageJson.version}.`, + `Expected package version 0.10.16, got ${packageJson.version}.`, ); const sourceManifest = await readFile( path.join(root, "SOURCE_MANIFEST.txt"), diff --git a/src/main/config-store.cjs b/src/main/config-store.cjs index 0e206b8..0cdd4d5 100644 --- a/src/main/config-store.cjs +++ b/src/main/config-store.cjs @@ -32,7 +32,7 @@ const DEFAULT_CONFIG = { favorites: [], updates: { owner: 'Jens', - repo: 'ForgeFlow', + repo: 'ForgeFlow-Public', branch: 'main', autoCheck: true, lastCheckedAt: null @@ -124,7 +124,15 @@ class ConfigStore { : {}, deploymentStates: source.deploymentStates && typeof source.deploymentStates === 'object' ? source.deploymentStates : {}, favorites: [...new Set(uniqueStrings(source.favorites).map((item) => item.toLowerCase()))], - updates: { ...DEFAULT_CONFIG.updates, ...(source.updates || {}) }, + updates: { + ...DEFAULT_CONFIG.updates, + ...(source.updates || {}), + // Move existing installations off the legacy endpoint while preserving + // a separately configured update repository. + ...((source.updates?.owner ?? 'Jens') === 'Jens' && source.updates?.repo === 'ForgeFlow' && (source.updates?.branch ?? 'main') === 'main' + ? { repo: 'ForgeFlow-Public' } + : {}) + }, servers: Array.isArray(source.servers) ? source.servers.filter((item) => item && typeof item === 'object') : [], preferences: { ...DEFAULT_CONFIG.preferences, ...(source.preferences || {}) }, operations: Array.isArray(source.operations) ? source.operations.slice(0, 250).map((operation) => { const { runnerLog, ...safeOperation } = operation || {}; return safeOperation; }) : [] @@ -375,7 +383,7 @@ class ConfigStore { async setUpdatePreferences(updates) { const next = { ...this.data.updates, ...(updates || {}) }; next.owner = String(next.owner || 'Jens').trim().slice(0, 100); - next.repo = String(next.repo || 'ForgeFlow').trim().slice(0, 100); + next.repo = String(next.repo || 'ForgeFlow-Public').trim().slice(0, 100); next.branch = assertBranchName(next.branch || 'main'); next.autoCheck = next.autoCheck !== false; this.data.updates = next; diff --git a/src/main/update-service.cjs b/src/main/update-service.cjs index a8b2b5f..692c39d 100644 --- a/src/main/update-service.cjs +++ b/src/main/update-service.cjs @@ -265,16 +265,28 @@ class UpdateService { "Update repository owner", ); const repo = safeRepositoryPart( - settings.repo || "ForgeFlow", + settings.repo || "ForgeFlow-Public", "Update repository name", ); const branchName = String(settings.branch || "main").trim(); - const branch = await this.gitea.getBranch(owner, repo, branchName); - const remoteSha = - branch?.commit?.id || branch?.commit?.sha || branch?.commit?.commit?.id; + let remoteSha; + let releaseTag = null; + if (this.appInfo.packaged) { + const release = await this.gitea.getLatestRelease(owner, repo); + if (!release || release.draft || release.prerelease) { + const error = new Error("The configured update repository has no published stable Windows release yet."); + error.code = "BINARY_RELEASE_NOT_FOUND"; + throw error; + } + remoteSha = release.target_commitish; + releaseTag = release.tag_name; + } else { + const branch = await this.gitea.getBranch(owner, repo, branchName); + remoteSha = branch?.commit?.id || branch?.commit?.sha || branch?.commit?.commit?.id; + } if (!/^[0-9a-f]{40}$/i.test(String(remoteSha || ""))) throw new Error( - "Gitea did not return a full commit SHA for the update branch.", + "Gitea did not return a full commit SHA for the update source.", ); const file = await this.gitea.getRepositoryFile({ @@ -294,6 +306,9 @@ class UpdateService { "The configured update repository is not a ForgeFlow source repository.", ); const remoteVersion = String(manifest.version || "").trim(); + if (releaseTag && releaseTag !== `v${remoteVersion}` && releaseTag !== remoteVersion) { + throw new Error("The published release tag does not match its source version."); + } const currentVersion = String(this.appInfo.version || "").trim(); const available = isNewerVersion(remoteVersion, currentVersion); const result = { @@ -301,6 +316,7 @@ class UpdateService { owner, repo, branch: branchName, + releaseTag, currentVersion, remoteVersion, remoteSha, diff --git a/src/renderer/mock-bridge.js b/src/renderer/mock-bridge.js index dfb7ed0..dea52e7 100644 --- a/src/renderer/mock-bridge.js +++ b/src/renderer/mock-bridge.js @@ -162,7 +162,7 @@ ], updates: { owner: "Jens", - repo: "ForgeFlow", + repo: "ForgeFlow-Public", branch: "main", autoCheck: true, lastCheckedAt: null, diff --git a/src/renderer/views.js b/src/renderer/views.js index 0048068..4877f79 100644 --- a/src/renderer/views.js +++ b/src/renderer/views.js @@ -762,7 +762,7 @@ function renderSettings() { const servers = state.servers || []; return `
Application

Settings

Connections, project discovery, secure SSH servers and application updates.

Gitea connection

${state.gitea.hasToken ? `Connected as ${escapeHtml(state.gitea.user?.login || "user")}` : "Not connected"}
${escapeHtml(state.gitea.baseUrl || "No Gitea instance configured")}
-

ForgeFlow updates

Signed packaged updates from ${escapeHtml(state.updates?.owner || "Jens")}/${escapeHtml(state.updates?.repo || "ForgeFlow")}
${icon(update?.available ? "download" : "check")}${update ? (update.available ? `ForgeFlow ${escapeHtml(update.remoteVersion)} is available${update.packaged ? "" : " in the source repository"}` : `ForgeFlow ${escapeHtml(update.currentVersion)} is up to date`) : `Current version ${escapeHtml(ui.boot.appVersion)}`}${update ? `Branch ${escapeHtml(update.branch)} · commit ${escapeHtml(update.shortSha)} · checked ${formatDate(update.checkedAt)}` : "No update check in this session."}
${update?.available && update.packaged && !update.downloaded ? `` : ""}${update?.downloaded ? `` : ""}
${icon("shield")}${update && !update.packaged ? "Source checkouts must be updated with Git after reviewing the exact commit. Integrated source replacement remains disabled until source archives are publisher-signed." : "Packaged updates require an Ed25519 publisher signature that binds the exact commit, artifact name, size and SHA-256 digest."}
+

ForgeFlow updates

Signed packaged updates from ${escapeHtml(state.updates?.owner || "Jens")}/${escapeHtml(state.updates?.repo || "ForgeFlow-Public")}
${icon(update?.available ? "download" : "check")}${update ? (update.available ? `ForgeFlow ${escapeHtml(update.remoteVersion)} is available${update.packaged ? "" : " in the source repository"}` : `ForgeFlow ${escapeHtml(update.currentVersion)} is up to date`) : `Current version ${escapeHtml(ui.boot.appVersion)}`}${update ? `${update.releaseTag ? `Release ${escapeHtml(update.releaseTag)}` : `Branch ${escapeHtml(update.branch)}`} · commit ${escapeHtml(update.shortSha)} · checked ${formatDate(update.checkedAt)}` : "No update check in this session."}
${update?.available && update.packaged && !update.downloaded ? `` : ""}${update?.downloaded ? `` : ""}
${icon("shield")}${update && !update.packaged ? "Source checkouts must be updated with Git after reviewing the exact commit. Integrated source replacement remains disabled until source archives are publisher-signed." : "Packaged updates require an Ed25519 publisher signature that binds the exact commit, artifact name, size and SHA-256 digest."}

SSH / Unraid servers

Credentials are encrypted locally; a new host fingerprint is shown before authentication.
${servers.length ? `
${servers.map((server) => `
${icon("server")}
${escapeHtml(server.name)}${escapeHtml(server.username)}@${escapeHtml(server.host)}:${escapeHtml(server.port)} · ${escapeHtml(server.basePath)}${server.hostFingerprint ? `Trusted ${escapeHtml(server.hostFingerprint)}` : "Host identity not trusted yet"}
`).join("")}
` : '

No SSH server configured. Add your Unraid server before creating an SSH deployment profile.

'}

Git remote maintenance

Standardize linked repositories to the current Gitea SSH URLs.

This replaces legacy aliases and renamed owners only after an explicit click. Local commits and files are not changed.

Project roots

The first folder is the default clone destination. ForgeFlow automatically creates one subfolder per repository.

${state.workspaceRoots.map((root, index) => `
${index === 0 ? 'Default' : ""}
`).join("")}
diff --git a/src/shared/release-policy.cjs b/src/shared/release-policy.cjs new file mode 100644 index 0000000..6d44854 --- /dev/null +++ b/src/shared/release-policy.cjs @@ -0,0 +1,27 @@ +'use strict'; + +function windowsReleaseAssetNames(version) { + return [ + ...['Setup', 'Portable'].flatMap((kind) => { + const name = `ForgeFlow-${kind}-${version}-win-x64.exe`; + return [name, `${name}.sha256`]; + }), + `ForgeFlow-${version}-provenance.json`, + `ForgeFlow-${version}-sbom.cdx.json`, + `ForgeFlow-${version}-release-manifest.json`, + `ForgeFlow-${version}-release-manifest.json.sig` + ]; +} + +function existingReleaseState(release, version, commit) { + if (release.target_commitish !== commit) { + throw new Error(`Release v${version} already targets ${release.target_commitish}; refusing assets from ${commit}. Bump the version for a new source commit.`); + } + if (release.draft) return 'draft'; + const names = new Set((release.assets || []).map((asset) => asset.name)); + const missing = windowsReleaseAssetNames(version).filter((name) => !names.has(name)); + if (missing.length) throw new Error(`Published release v${version} is missing: ${missing.join(', ')}.`); + return 'published'; +} + +module.exports = { windowsReleaseAssetNames, existingReleaseState }; diff --git a/tests/config-store.test.mjs b/tests/config-store.test.mjs index d12a493..1b242c7 100644 --- a/tests/config-store.test.mjs +++ b/tests/config-store.test.mjs @@ -48,6 +48,20 @@ test("load creates missing config and recovers malformed JSON", async (t) => { assert.ok((await readdir(directory)).some((name) => name.includes(".corrupt-"))); }); +test("legacy ForgeFlow update endpoint migrates to the signed public releases", async (t) => { + const { directory, store } = await storeFixture(t); + assert.equal(store.data.updates.repo, "ForgeFlow-Public"); + await writeFile(store.filePath, JSON.stringify({ + updates: { owner: "Jens", repo: "ForgeFlow", branch: "main", autoCheck: true }, + }), "utf8"); + await store.load(); + assert.equal(store.data.updates.repo, "ForgeFlow-Public"); + assert.equal(JSON.parse(await readFile(store.filePath, "utf8")).updates.repo, "ForgeFlow-Public"); + assert.equal(store.migrate({ updates: { owner: "Team", repo: "ForgeFlow" } }).updates.repo, "ForgeFlow"); + assert.equal(store.migrate({ updates: { owner: "Jens", repo: "CustomUpdates" } }).updates.repo, "CustomUpdates"); + assert.equal(store.migrate({ updates: { owner: "Jens", repo: "ForgeFlow", branch: "custom" } }).updates.repo, "ForgeFlow"); +}); + test("server normalization rejects unsafe targets and preserves bounded scan configuration", async (t) => { const { store } = await storeFixture(t); assert.throws(() => store.normalizeServer({ host: "bad host", username: "root" }), /hostname/); diff --git a/tests/release-policy.test.mjs b/tests/release-policy.test.mjs new file mode 100644 index 0000000..a495753 --- /dev/null +++ b/tests/release-policy.test.mjs @@ -0,0 +1,21 @@ +import test from 'node:test'; +import assert from 'node:assert/strict'; +import releasePolicy from '../src/shared/release-policy.cjs'; + +const { windowsReleaseAssetNames, existingReleaseState } = releasePolicy; +const commit = 'a'.repeat(40); +const version = '0.10.16'; + +test('a draft for another commit cannot receive replacement release assets', () => { + assert.throws(() => existingReleaseState({ target_commitish: 'b'.repeat(40), draft: true }, version, commit), /Bump the version/); +}); + +test('a matching draft can resume while a complete published release is immutable', () => { + assert.equal(existingReleaseState({ target_commitish: commit, draft: true }, version, commit), 'draft'); + assert.equal(existingReleaseState({ target_commitish: commit, draft: false, assets: windowsReleaseAssetNames(version).map((name) => ({ name })) }, version, commit), 'published'); +}); + +test('a published release missing its signature cannot be treated as complete', () => { + const assets = windowsReleaseAssetNames(version).filter((name) => !name.endsWith('.sig')).map((name) => ({ name })); + assert.throws(() => existingReleaseState({ target_commitish: commit, draft: false, assets }, version, commit), /release-manifest.json.sig/); +}); diff --git a/tests/update-service.test.mjs b/tests/update-service.test.mjs index 7ea358e..f671d1c 100644 --- a/tests/update-service.test.mjs +++ b/tests/update-service.test.mjs @@ -118,6 +118,33 @@ test("update repository parts reject path injection", async () => { await rm(temp, { recursive: true, force: true }); }); +test("packaged updates pin the published release commit despite later source-only changes", async (t) => { + const temp = await mkdtemp(path.join(os.tmpdir(), "forgeflow-release-check-")); + t.after(() => rm(temp, { recursive: true, force: true })); + const releaseCommit = "b".repeat(40); + const service = new UpdateService({ + store: { data: { updates: {} }, save: async () => {} }, + gitea: { + async getLatestRelease(owner, repo) { + assert.equal(repo, "ForgeFlow-Public"); + return { tag_name: "v0.10.16", target_commitish: releaseCommit, draft: false, prerelease: false }; + }, + async getBranch() { throw new Error("Packaged updates must not follow mutable main."); }, + async getRepositoryFile(input) { + assert.equal(input.ref, releaseCommit); + return { decoded: JSON.stringify({ name: "forgeflow", version: "0.10.16" }) }; + }, + }, + appInfo: { version: "0.10.14", packaged: true }, + sourcePath: temp, + userDataPath: temp, + }); + const result = await service.check(); + assert.equal(result.available, true); + assert.equal(result.remoteSha, releaseCommit); + assert.equal(result.releaseTag, "v0.10.16"); +}); + test("source updater refuses an unsigned archive before launching a helper", async () => { const temp = await mkdtemp( path.join(os.tmpdir(), "forgeflow-update-handshake-"),