also looking at this
fix(mobile): preserve native editing, navigation, and durable media requests
#369
36 files
+864
-185
| @@ -29,6 +29,22 @@ jobs: | ||
| 29 | 29 | - name: Review dependency advisories |
| 30 | 30 | run: bun scripts/advisory-policy.ts |
| 31 | 31 | |
| 32 | # Relative reusable workflows check the exact tagged commit. Main may keep | |
| 33 | # moving while these full suites run; publication remains tied to this tag. | |
| 34 | source-acceptance: | |
| 35 | name: accept exact release source | |
| 36 | needs: validate-release | |
| 37 | uses: ./.github/workflows/ci.yml | |
| 38 | permissions: | |
| 39 | contents: read | |
| 40 | ||
| 41 | native-acceptance: | |
| 42 | name: accept exact native runtimes | |
| 43 | needs: validate-release | |
| 44 | uses: ./.github/workflows/mobile-e2e.yml | |
| 45 | permissions: | |
| 46 | contents: read | |
| 47 | ||
| 32 | 48 | release-sbom: |
| 33 | 49 | needs: validate-release |
| 34 | 50 | uses: ./.github/workflows/sbom.yml |
| @@ -40,7 +56,7 @@ jobs: | ||
| 40 | 56 | pantry: |
| 41 | 57 | # The reusable SBOM workflow includes the vulnerability scan. Publishing |
| 42 | 58 | # must wait for its existing Critical gate, not merely attach it afterward. |
| 43 | needs: [validate-release, release-sbom] | |
| 59 | needs: [validate-release, release-sbom, source-acceptance, native-acceptance] | |
| 44 | 60 | name: pantry (${{ matrix.platform.name }}) |
| 45 | 61 | strategy: |
| 46 | 62 | fail-fast: false |
| @@ -681,7 +697,7 @@ jobs: | ||
| 681 | 697 | |
| 682 | 698 | publish-release: |
| 683 | 699 | name: publish complete verified release |
| 684 | needs: [validate-release, verify-release, verify-macos-downloads, verify-desktop-downloads, attach-release-sbom, prepare-npm] | |
| 700 | needs: [validate-release, source-acceptance, native-acceptance, verify-release, verify-macos-downloads, verify-desktop-downloads, attach-release-sbom, prepare-npm] | |
| 685 | 701 | runs-on: ubuntu-latest |
| 686 | 702 | permissions: |
| 687 | 703 | contents: write |