zyycnandClaude 720eb0c227 ci: freeze applied migrations behind a sha256 manifest ...

sqlx re-validates applied-migration checksums on every startup, so any byte
change to a released migration file locks existing deployments out of
starting with no automatic recovery. Record the released migrations in
backend/migrations/.frozen-sha256 and fail CI when a frozen file changes or
a new migration lands without being enrolled. Document the freeze rule and
the local test-database environment in backend/migrations/README.md. The
migration files themselves stay byte-identical: adding even a header
comment would trip the same startup validation this guard protects.

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-26 23:20:38 +08:00

..

workflows

ci: freeze applied migrations behind a sha256 manifest

2026-07-26 23:20:38 +08:00

dependabot.yml

chore(deps): delay fresh npm updates

2026-07-15 11:13:50 +08:00