ci(mirror): fail-closed publish guard + publisher for the public deliverable mirror - #654

Merged

LukasWodka merged 7 commits into

ci/mirror-publish-guard

Sep 11, 2026

Commits on Sep 10, 2026

ci(mirror): fail-closed publish guard + publisher for the public deliverable mirror

LukasWodka
and
claude
committed
efb634c
ci(mirror): split the string guard into refuse and report tiers

LukasWodka
and
claude
committed
b54b5b5
ci(mirror): run the tooling from this commit, treat the tag as data, keep prereleases off the default branch

LukasWodka
and
claude
committed
a0d4231
test(mirror): pin the fixture origin's HEAD so the tag-fetch case runs on a fresh runner

LukasWodka
and
claude
committed
512223b
fix(guard): strip [allow] tokens as whole words, name private needles by number only

LukasWodka
and
claude
committed
0528177
fix(mirror): push the tree only for the newest stable release

LukasWodka
and
claude
committed
58571a5
ci(mirror): refuse a non-boolean isPrerelease; keep the guard summary under errexit

LukasWodka
and
claude
committed
0602d21