88cae79dc2
eas: pin fingerprint action v0.3.0
2026-07-26 22:18:40 +03:00
fc3d24e1f6
eas: repin reviewed fingerprint action
2026-07-26 22:03:53 +03:00
50ad5de423
eas: trust baselines from main only
2026-07-26 22:03:53 +03:00
23a71f6fc0
eas: repin fingerprint action after main merge
2026-07-26 22:03:53 +03:00
c2d50190c8
eas: persist full fingerprint baseline as artifact
2026-07-26 22:03:53 +03:00
aa79a7a3e5
eas: pass native hash via artifact, not job output
...
Roast flagged that this workflow's own comments document GitHub suppressing
md5-like hashes in job outputs as possible secrets - which would leave
recordBaseline reading an empty value and failing every run. Transport the
hash through an intra-run artifact (the same pattern nightly-build uses for
its commit marker) instead, which is not subject to that filtering. Bump the
fingerprint action pin to the reviewed v0.3.0 SHA.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-07-26 22:03:29 +03:00
4b7ab46d5c
eas: advance OTA fingerprint baseline via repo variable
...
The OTA pipeline decided OTA-vs-native-rebuild by diffing the current
fingerprint against a baseline commit stored in an actions/cache entry
keyed most-recent-testflight-commit. That cache only saved on a miss but
was restored on every run, so it only advanced when GitHub evicted it.
Once eviction stopped (~June 12), the baseline froze, every fingerprint
looked changed, and OTA deploys silently stopped - every push ran full
native builds instead.
Replace the cache baseline with a repo variable
(MOST_RECENT_TESTFLIGHT_NATIVE_HASH) advanced by a dedicated recordBaseline
job that runs only after both native builds succeed. The fingerprint action
(bumped to the hash-aware v0.3.0) compares the current commit's native hash
against the variable directly, skipping the baseline checkout+reinstall.
recordBaseline is isolated so the PAT that can write repo variables
(EAS_BASELINE_VARIABLE_TOKEN - the built-in GITHUB_TOKEN cannot manage
variables) lives nowhere else in the pipeline, and refuses to write an empty
value. The now-dead cache write steps are removed from the reusable
build-submit-ios/android workflows.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-07-26 22:03:28 +03:00
76a928a7af
ci: skip the per-PR OTA job for bot authors ( #11273 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-24 19:07:57 -07:00
9eb78c0f6c
ci: publish OTA to denis (S3) + automatic per-PR previews ( #11235 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-24 18:18:00 -07:00
3b6fbf315b
Fix Maestro E2E runtime environment ( #11247 )
2026-07-24 03:30:10 -07:00
7d4b91dd38
Bump the actions group with 4 updates ( #11202 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 05:09:01 -07:00
3eab767e89
Bump actions/setup-node from 6.4.0 to 7.0.0 ( #11203 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 05:08:41 -07:00
0fb7251c64
Add nightly Maestro E2E workflow ( #11181 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-20 07:42:53 -07:00
c4e80b4456
Fix Android release asset upload ( #11174 )
2026-07-20 07:42:35 -07:00
21d53ce0f8
Split mobile build/submit pipelines and de-duplicate OTA workflow ( #11133 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-20 07:07:30 -07:00
783dfe2a12
Cache main bundle stats for PR checks ( #11172 )
2026-07-17 07:28:08 +03:00
007c21fa8e
Add moduleSuffixes to tsconfig ( #11146 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-16 12:47:53 -07:00
f9384e44c7
Bump expected cocoapods version to match latest macos-26 runner image ( #11171 )
2026-07-16 09:33:07 -07:00
19872124bf
Bump the actions group with 6 updates ( #11148 )
2026-07-13 23:48:14 +03:00
03ccd96661
Force native builds when package.json version changes in OTA deploy ( #11061 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-07 05:31:37 -07:00
640662d57c
Fix zizmor findings in build workflows ( #11046 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-07 04:20:50 -07:00
52e8051fa3
Bump the actions group with 5 updates ( #11076 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 04:19:38 -07:00
86c1cbbc95
Bump actions/cache from 5.0.5 to 6.1.0 ( #11078 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 04:18:26 -07:00
545fec82fb
Bump dcarbone/install-jq-action from 3.2.0 to 4.0.1 ( #11077 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 04:17:43 -07:00
133476e0cd
Update advanced search suggestions ( #11036 )
2026-06-30 14:26:50 -07:00
5e7343b0d2
Fix yaml syntax in pull-request-commit.yml ( #11037 )
2026-06-30 14:15:28 -07:00
57dc53fbf5
Add "fingerprint changed" label to PRs with native changes ( #10742 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-30 15:19:24 -05:00
de51ceb577
Bump actions/checkout from 6.0.3 to 7.0.0 ( #11022 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 14:20:43 -05:00
eb755bc31d
Bump the actions group with 3 updates ( #11021 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 13:51:58 -05:00
44f6a98f59
Use latest fingerprint-native action ( #11016 )
2026-06-30 13:40:37 -05:00
75e2c40ba4
Use correct param name for setup-bundletool action ( #11020 )
2026-06-30 00:56:44 -07:00
a5ed41fa0f
Fix CI - grant workflows permission for internal sync push ( #11010 )
2026-06-29 16:30:01 +03:00
fcbd23e7db
Bump actions/download-artifact from 7.0.0 to 8.0.1 ( #10971 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 07:40:12 -07:00
f3978d1a1f
Fix internal repo sync broken by actions/checkout v6 bump ( #10933 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-24 11:38:44 -05:00
4308d75e49
Add TestFlight group selection to iOS build workflow ( #10979 )
2026-06-24 10:52:58 -04:00
dd452a4336
Fix nightly build workflow ( #10943 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-18 10:13:41 -05:00
6f916902e7
Add nightly iOS/Android build workflow ( #10940 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-17 17:53:08 -05:00
d10137fd78
Simplify Android build: bundletool + eas submit ( #9855 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Eric Bailey <git@esb.lol >
2026-06-17 16:42:55 -05:00
6af477bcc2
Replace setup-cocoapods action with inline version assert ( #10932 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-17 02:51:59 -07:00
b8a6a8c8ce
Pin every action to latest SHA ( #10779 )
...
Co-authored-by: Eric Bailey <git@esb.lol >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-06-16 14:35:19 -05:00
6c04170734
Replace broken @claude workflow with Bedrock-based claude-review/mention ( #10880 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-06-11 21:36:10 -07:00
f321122656
use opus 4.8 in github claude ( #10837 )
2026-06-10 01:55:03 -07:00
6d468c8ca4
[CI] Remove Wandalen/wretry.action, call pnpm install directly ( #10745 )
2026-06-05 22:49:02 +03:00
f99837040e
Compile i18n before running lint ( #10711 )
2026-06-03 13:21:13 -07:00
84d1785e12
Enable ESLint errors and suppress existing violations ( #10490 )
2026-06-03 11:27:44 -07:00
d08ab487d8
Bump actions/create-github-app-token from 1 to 3 ( #10691 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-02 11:57:43 -07:00
a2c8b47b87
Bump marocchino/sticky-pull-request-comment from 2 to 3 ( #10692 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-02 11:56:46 -07:00
8e5ac6790f
Bump slackapi/slack-github-action from 2.1.1 to 3.0.3 ( #10693 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-02 11:55:39 -07:00
53fa6b2493
ci: add dependabot config with 7-day cooldown ( #10475 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-06-02 11:04:28 -07:00
dfa82904ec
Run GitHub actions in parallel ( #10509 )
...
Co-authored-by: Eric Bailey <git@esb.lol >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-02 12:24:55 -05:00
Samuel Newman