gensokyo-dev 5d6b8a0ab6 fix(release): isolate npm publication from dependency execution (#6681) ...

Keep dependency execution in read-only release jobs and validate the original qualified archive with Node built-ins before publication. Refresh registry state on every publisher attempt; retain exact bytes/channel verification, v1 read-only recovery, and installed CLI/MCP checks before MCP publication.

Static/docs checks, artifact/registry/recovery tests and real package/rehearsal verification pass. All four hosted package platforms pass. Portable CI retains the independently reproduced main PTX failure in #6675 and fail-fast missing coverage; use the owner-authorized existing PR-only exception, with limitations documented in the PR. Refs #6480.

2026-10-23 12:27:24 +00:00

..

actions

ci: keep npm download caches from Turbo snapshot growth (#5655)

2026-10-21 03:48:14 +08:00

ISSUE_TEMPLATE

…

workflows

fix(release): isolate npm publication from dependency execution (#6681)

2026-10-23 12:27:24 +00:00

actionlint.yaml

…

pull_request_template.md

docs: require buy-in for speculative hardening complexity

2026-10-23 15:54:36 +08:00