FredApps 603045e42d release.yml: a dry-run input builds and checks without releasing (#208) ...

* release.yml: a dry-run input builds and checks without releasing

For a nightly run on main that finds release-only breakage before release day. On 11 Nov 2026
gridcraft's riscv64 build, materialcraft's private-repo FreeBSD jobs, wordcraft's Print job and
the riscv64 apt mirrors each surfaced only during the release, one fix PR and release run at a
time. With dry-run: no job enters the release environment (no signing secrets; the environment
admits only the release branch), the macOS job and the draft are skipped, and the Flatpak OCI
layouts are not pushed to GHCR or Docker Hub.

* tests: the Flatpak OCI push and the release environment also stay out of a dry run

2026-11-11 22:46:06 +01:00

..

ast-grep

ast-grep: a reusable structural-lint workflow driven by the app's sgconfig.yml (#80)

2026-10-24 19:29:21 -04:00

test_arch.py

feat: allow additional Arch runtime dependencies (#161)

2026-11-06 19:33:10 -05:00

test_ast_grep.py

fix(ast-grep): end option parsing before the scanned paths

2026-11-02 22:17:40 -05:00

test_changed_paths.py

test: account for Harden-Runner step in workflow assertions

2026-11-10 08:26:20 -05:00

test_check_git_sources.py

test: account for Harden-Runner step in workflow assertions

2026-11-10 08:26:20 -05:00

test_contributor_generator.py

Build model titles only from each provider's known words

2026-11-04 13:49:44 +01:00

test_contributor_refresh.py

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

test_craft_fonts.py

Shared quality-gate workflow for the craft apps (gate.yml) (#69)

2026-10-23 12:15:49 -04:00

test_craft_i18n.py

fix(release): drop the i18n gate; missing translations never block (storytold/craft-i18n#20) (#79)

2026-10-23 17:06:45 -04:00

test_docker_build.py

fix(docker-build): scope packages: write to the pushing jobs

2026-11-10 11:10:27 +01:00

test_export_app_build_env.py

release.yml: export each app's build variables from its env.sh, so a new app needs no change here (#148)

2026-11-06 07:36:30 -05:00

test_freebsd_cache.py

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

test_freebsd_release.py

ci: harden workflows with credential isolation, template injection defenses, and dependabot cooldown (#191)

2026-11-10 18:07:38 -05:00

test_freebsd.py

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

test_gate.py

gate.yml: optional gate-timeout-minutes stops a hung gate with a process list and a clear error (#143)

2026-11-05 11:27:56 +01:00

test_house_rules.py

test: account for Harden-Runner step in workflow assertions

2026-11-10 08:26:20 -05:00

test_import_macos_certificate.py

Add import-macos-certificate: the shared macOS signing certificate import (#140)

2026-11-05 09:08:39 -05:00

test_install_apt_packages.py

apt: wait for cloud-init before rewriting the sources (#204)

2026-11-11 17:57:29 +01:00

test_install_riscv64_cross.py

apt: wait for cloud-init before rewriting the sources (#204)

2026-11-11 17:57:29 +01:00

test_linux_glibc.py

fix(release): give riscv64 packages the glibc floor of their runner (#62)

2026-10-22 17:10:08 -04:00

test_nextest_versions.py

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

test_nix.py

security(nix): prevent shell injection through extra-args (#52)

2026-10-22 14:37:49 -04:00

test_packaging_lint.py

fix(packaging-lint): retry transient actionlint downloads (#176)

2026-11-08 14:16:10 +01:00

test_python_coverage.py

Provision fonts and optional Python coverage for Sonar (#88)

2026-10-25 23:37:12 -04:00

test_release_dry_run.py

release.yml: a dry-run input builds and checks without releasing (#208)

2026-11-11 22:46:06 +01:00

test_release_flatpak_oci.py

release.yml: a dry-run input builds and checks without releasing (#208)

2026-11-11 22:46:06 +01:00

test_release_inputs.py

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

test_release_retain.py

feat: allow uploading assets to an existing published release (#164) (#165)

2026-11-06 20:40:48 -05:00

test_release_tag_prefix.py

feat: allow a custom draft release tag prefix (#159)

2026-11-06 16:06:01 -05:00

test_resolve_version.py

test(resolve-version): add test for CRLF sanitization in app-title

2026-10-24 22:46:59 -04:00

test_scaffold_flatpak_oci.py

Keep development builds off stable OCI tags

2026-11-03 00:01:47 -05:00

test_setup_windows_signing.py

Add setup-windows-signing: the shared Authenticode signing script (#144)

2026-11-05 09:10:10 -05:00

test_sign_linux_fixture.py

fix(sonar): reduce sharded coverage disk usage (#174)

2026-11-08 14:15:27 +01:00

test_sign_linux.py

release.yml: a dry-run input builds and checks without releasing (#208)

2026-11-11 22:46:06 +01:00

test_sonarcloud_disk.py

fix(sonar): reduce sharded coverage disk usage (#174)

2026-11-08 14:15:27 +01:00

test_sonarcloud.py

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

test_supply_chain.py

ci: replace anchore/sbom-action with step-security/sbom-action

2026-11-10 08:26:20 -05:00

test_unit_test_triggers.py

ci: honor negated path patterns in the trigger test

2026-10-26 17:47:48 -07:00

test_windows_arm64.py

ci(windows-arm64): only main saves the packaging cache (#116)

2026-11-01 01:39:08 +01:00

test_windows_install_contract.py

fix(ci): separate ARM64 install paths and scope (#100)

2026-10-27 15:45:39 -04:00

test_windows_release.py

feat: drop Windows 32-bit builds (#163)

2026-11-06 21:27:06 -05:00