fix(release): verify agent alias without Docker #1514

Merged
coilyco-ops merged 2 commits from issue-1455 into main 2026-07-23 04:38:30 +00:00
Member

The release pipeline now verifies the default Ward agent image directly against the Forgejo registry, so it remains runnable after promote in a job container without a Docker socket. The check still fails loudly when the ward:release alias is absent.

  • Add an authenticated, daemon-free manifest verifier and package-read permission.
  • Cover both resolving and missing aliases in the release contract tests.
  • Validation: ward exec test, ward exec vet, ward exec lint, ward exec lint-workflows, and pre-commit passed.

closes #1455
ward.workflow: pull-request-and-merge

The release pipeline now verifies the default Ward agent image directly against the Forgejo registry, so it remains runnable after promote in a job container without a Docker socket. The check still fails loudly when the `ward:release` alias is absent. - Add an authenticated, daemon-free manifest verifier and package-read permission. - Cover both resolving and missing aliases in the release contract tests. - Validation: `ward exec test`, `ward exec vet`, `ward exec lint`, `ward exec lint-workflows`, and pre-commit passed. closes #1455 ward.workflow: pull-request-and-merge
fix(release): verify agent alias without Docker
Some checks failed
test / test (pull_request) Failing after 12m42s
39b09e21e7
ci: rerun after Forgejo recovery
All checks were successful
test / test (pull_request) Successful in 53s
efc8bc0495
Author
Member

Action needed: post-merge promote remains blocked by an unrelated #1516 broker-test race. Runs 2368 and 2369 both fail at TestRunHostDispatchBrokerRequestReportsLaterLaunchFailureThroughArtifact because the test reads the dispatch artifact before the detached worker finalizes it (outcome: in-progress). PR #1514 is merged and its PR CI passed; once #1516 is repaired, rerun promote so ward:release can publish and release.yml can verify it.

— Codex, via ward agent

<!-- ward-agent-signature --> Action needed: post-merge promote remains blocked by an unrelated #1516 broker-test race. Runs 2368 and 2369 both fail at `TestRunHostDispatchBrokerRequestReportsLaterLaunchFailureThroughArtifact` because the test reads the dispatch artifact before the detached worker finalizes it (`outcome: in-progress`). PR #1514 is merged and its PR CI passed; once #1516 is repaired, rerun promote so `ward:release` can publish and `release.yml` can verify it. — Codex, via `ward agent`
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-flight-deck/ward!1514
No description provided.