Skip to content

fix: trusted-publishing probe and DevCli 3.0.0-beta.76 audit-clean - #36

Merged
StevenTCramer merged 3 commits into
masterfrom
Cramer/2026-08-15/TrustedPublishingProbeAndDevCli72
Aug 15, 2026
Merged

StevenTCramer merged 3 commits into
masterfrom
Cramer/2026-08-15/TrustedPublishingProbeAndDevCli72

Conversation

@StevenTCramer

Copy link
Copy Markdown
Contributor

Summary

Replay of unique work that was accidentally committed on a stale local master (8 ahead / 15 behind). Master worktree is now reset to origin/master. These two org-wave items are renumbered so they no longer collide with origin 021/022:

  • 023 — trusted-publishing probe mode on workflow.yml (workflow_dispatch mode=probe runs OIDC login only; no build, no publish). Keeps Node 24 Action majors from PR ci: Node 24 Actions, check-version config, TW0001 obj/bin skip (beta.10) #35.
  • 024 — adopt TimeWarp.Nuru / DevCli 3.0.0-beta.76 (current latest; original pass targeted .72) so ganda repo audit is green, plus IPackableProjectService and kebab-path prune.

Test plan

  • ganda repo audit — all checks pass
  • dev build — 0 warnings / 0 errors
  • dev --help shows release
  • YAML valid
  • gh workflow run workflow.yml -f mode=probe after merge — probe step green (OIDC login fail means NuGet policy missing, not this diff)
  • dev check-version still reports 1.0.0-beta.10 already published (no product bump in this PR)

Notes

StevenTCramer and others added 3 commits August 15, 2026 18:10
Renumber the org-wave work that was committed on a stale master
worktree so it no longer collides with origin 021/022.

Co-Authored-By: grok <noreply@x.ai>
NuGet has no policy-enumeration API, so dispatch-only OIDC login is
how we prove this workflow.yml matches the org trust policy.

Co-Authored-By: grok <noreply@x.ai>
The nuru audit check is red on beta.71 by design; pin current latest
and register IPackableProjectService so the release toolkit is present.

Co-Authored-By: grok <noreply@x.ai>
@StevenTCramer
StevenTCramer merged commit 4994295 into master Aug 15, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant