c5093818ae
ci: publish OTA bundles to denis (S3) + automatic per-PR previews
...
Rewire OTA publishing off the legacy ota1 box onto the S3-backed denis
service, in two places:
- Prod path (bundle-deploy-eas-update.yml): dual-write the exported bundle
to denis via `denis publish` alongside the existing ota1 upload, under the
identical `!includes-changes && !version-changed` gate. Assumes the
main-only `denis-ci-publish` role via OIDC (id-token: write). Both paths
must succeed; they are removed together once denis is the sole origin.
- Per-PR previews (pull-request-commit.yml): replace the `@github-actions ota`
comment trigger (pull-request-comment.yml, deleted) with an automatic job
that fires on pull_request. Gated to same-repo PRs
(head.repo.full_name == github.repository) authored by a
MEMBER/OWNER/COLLABORATOR, so a fork or external contributor can never run
with the publish role or repo secrets in scope. Publishes to the
`pull-request-<N>` channel under the PR-scoped `denis-ci-publish-pr` role,
further narrowed by an inline session policy to `pr/<N>/*`.
- setup-denis composite action: mint a short-lived github-app token
(contents:read on private tango), download + verify the pinned
denis release binary, put it on PATH.
denis release tag is a single `DENIS_RELEASE_TAG` env per workflow.
ROAST_SKIP: pre-commit roast flags setup-denis verifying the binary against
a checksum from the same tango release (no independent digest anchor).
Reviewed and accepted: exploitation requires compromising the private tango
release itself, and the marginal integrity gain is not worth pinning a digest
that must be bumped on every denis roll.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-22 12:50:12 -07:00
f62e54ec82
Use stable tsgolint ( #11229 )
2026-07-22 07:39:11 -07:00
676f3f9e1a
Nightly source-language update
2026-07-22 03:10:59 +00:00
26ce5f0934
Hide video pillarboxing on web when the card fits ( #11118 )
2026-07-21 16:39:51 -05:00
44b1ab08b5
Move known likers below stats row; restore original order in stats row ( #11192 )
2026-07-21 15:40:30 -05:00
c70baff709
Squish separate imports from the same source in ActivityNotificationSettings ( #11225 )
2026-07-21 23:25:15 +03:00
cbf0d89128
Remove console.log, address lint ( #11228 )
2026-07-21 23:25:01 +03:00
86f0bedfbe
Add new search results tab for starter packs ( #11226 )
2026-07-21 13:18:12 -07:00
26143c1a48
add client event for failed video playback ( #11170 )
2026-07-21 11:32:53 -04:00
6fea12480a
TypeScript 7 (attempt 2) ( #11169 )
2026-07-21 05:21:51 -07:00
92ec563f9d
Restore activity notification subscriptions screen ( #11201 )
2026-07-21 05:16:22 -07:00
7d4b91dd38
Bump the actions group with 4 updates ( #11202 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 05:09:01 -07:00
3eab767e89
Bump actions/setup-node from 6.4.0 to 7.0.0 ( #11203 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 05:08:41 -07:00
0ba78623d6
Fix image menu in landscape orientation ( #11188 )
2026-07-21 05:07:43 -07:00
daa11b63e7
Nightly source-language update
2026-07-21 03:10:47 +00:00
baaf2bdc2b
Don't roll up account labels into additional post alerts ( #11204 )
2026-07-20 17:06:14 -05:00
d3e7d99fa7
Fix image crop in quote posts, remove PostEmbedViewContext.FeedEmbedRecordWithMedia ( #11205 )
2026-07-20 16:47:05 -05:00
0f27fdda65
Add height constraint to full-height bottom sheets ( #11178 )
2026-07-20 10:01:31 -07:00
92ef1528bf
Stop closing search suggestions on input blur ( #11199 )
2026-07-20 09:44:17 -07:00
1803de03a4
Lighten blue (link) text for dim and dark themes ( #11164 )
2026-07-20 09:29:58 -07:00
0fb7251c64
Add nightly Maestro E2E workflow ( #11181 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-20 07:42:53 -07:00
c4e80b4456
Fix Android release asset upload ( #11174 )
2026-07-20 07:42:35 -07:00
21d53ce0f8
Split mobile build/submit pipelines and de-duplicate OTA workflow ( #11133 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-20 07:07:30 -07:00
a49faf46eb
Reduce bottom hitslop for menu button ( #11189 )
2026-07-20 05:39:25 -07:00
783dfe2a12
Cache main bundle stats for PR checks ( #11172 )
2026-07-17 07:28:08 +03:00
048428b618
Nightly source-language update
2026-07-17 03:10:25 +00:00
007c21fa8e
Add moduleSuffixes to tsconfig ( #11146 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-16 12:47:53 -07:00
a8b963b357
Bump version to v1.129.0 ( #11175 )
2026-07-16 12:47:31 -07:00
f9384e44c7
Bump expected cocoapods version to match latest macos-26 runner image ( #11171 )
2026-07-16 09:33:07 -07:00
54a1d81936
Remove success toast from Bookmark Button ( #11054 )
...
Co-authored-by: Eric Bailey <git@esb.lol >
2026-07-16 10:33:49 -05:00
b91f5e16bc
use pnpm 11.13.1 ( #11168 )
2026-07-16 07:23:37 -07:00
4134e062cf
v1.128.0 release prep ( #11167 )
2026-07-16 07:10:39 -07:00
406fb5425c
Add Japan-gated custom logo ( #11161 )
2026-07-16 04:26:05 -07:00
4037392105
Update SVGO ( #11083 )
2026-07-16 04:21:31 -07:00
4983fee7a4
Nightly source-language update
2026-07-16 03:10:26 +00:00
2a4642f324
Add mark requests as read to chat settings menu ( #11107 )
2026-07-15 16:12:02 -07:00
83a791d7c8
Fix invisible bidi characters copied with handles on web ( #11066 )
2026-07-15 17:56:34 -05:00
4705b7f408
Add DM button to labeller profiles ( #11149 )
2026-07-15 17:32:18 -05:00
48fecae677
Log additional context for post:* events ( #11035 )
2026-07-15 12:52:53 -07:00
a0c75944a3
Don't suggest retrying an unretryable error ( #11159 )
2026-07-15 11:27:19 -07:00
7009417035
Remove IS_INTERNAL check for beta feedback button ( #11162 )
2026-07-15 11:21:07 -07:00
211c8838a9
Upgrade pnpm to 11.13.0 ( #11163 )
2026-07-15 11:15:34 -07:00
5b9967b17d
Strip leading @ in from: queries ( #11158 )
2026-07-15 09:23:11 -07:00
3c5c11c002
Add setting for opting in to beta features ( #11123 )
2026-07-15 06:06:54 -07:00
d7f40b7e7f
fix android carousel jiggle from cdn-rounded aspect ratio ( #11153 )
2026-07-15 04:36:04 -07:00
821e1b838a
[APP-2642] Social proof text is truncated on mobile ( #11155 )
2026-07-15 10:53:40 +03:00
581aee5472
Nightly source-language update
2026-07-15 03:10:36 +00:00
f42a325f49
fix web feed footer clearing the bottom bar ( #11151 )
2026-07-14 10:15:28 -07:00
4c111eb45e
Stub out react-native-svg fetchData on web to drop buffer polyfill ( #11097 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-14 10:15:10 -07:00
9fa5f15baa
Revert "Typescript 7" ( #11152 )
2026-07-14 08:50:06 -07:00
Austin McKinley