Commit Graph
56 Commits
Author SHA1 Message Date
Jinwoo Hong 6a4b89785c revert: back out the Windows terminal update-survival chain (#7421→#7499) (#7505)
* Revert "Preload the daemon windowsHide shim via --require; wrap promisify custom (#7499)"

This reverts commit 8f396badaf.

* Revert "Hide console windows for children of the node.exe-hosted daemon (#7486)"

This reverts commit f0fdd3a716.

* Revert "fix(daemon): relocate daemon host image out of the install-dir kill zone (#7473)"

This reverts commit f4faafa987.

* Revert "fix(pty): keep runtime dirs a surviving daemon still uses (#7463)"

This reverts commit 3cd23a13a1.

* Revert "Relocate node-pty ConPTY runtime outside the Windows install dir (fixes update-time terminal loss) (#7421)"

This reverts commit 509c41e2bf.
2026-07-05 22:50:48 -07:00
f4faafa987 fix(daemon): relocate daemon host image out of the install-dir kill zone (#7473)
Co-authored-by: Neil <neil@stably.ai>
Co-authored-by: Jinwoo Hong <73622457+Jinwoo-H@users.noreply.github.com>
2026-07-05 19:52:06 -07:00
NeilandOrca b3f86813b3 fix(ci): register PSGallery via PSResourceGet for Windows SignPath install (#7379)
Register-PSRepository -Default failed inside the legacy nuget.exe provider
with "Missing option value for: '-source'" on the hosted windows-2022 image,
leaving PSGallery unregistered so the subsequent Set-PSRepository threw
"No repository with the name 'PSGallery'".

Prefer Microsoft.PowerShell.PSResourceGet (bundled with PowerShell 7.4+),
which has PSGallery registered by default and avoids that code path; fall
back to PowerShellGet with an explicit NuGet-provider bootstrap only when
PSResourceGet is unavailable.

Co-authored-by: Orca <help@stably.ai>
2026-07-04 16:57:09 -07:00
Neil 96481b1eab Stop scheduled release cuts (#7258) 2026-07-03 11:03:28 -07:00
Brennan BensonandNeil 49a8e80526 Temporarily bypass Windows inner signature gate (#7137)
Co-authored-by: Neil <neil@stably.ai>
2026-07-02 12:34:35 -07:00
Brennan BensonandNeil fc17c57b6b Fix Windows SignPath PSGallery preflight (#7135)
* Verify Windows app executable signing

* Isolate Windows signing verifier tests

* Handle direct Windows installer extraction

* Fix SignPath PowerShell gallery preflight

---------

Co-authored-by: Neil <neil@stably.ai>
2026-07-02 11:42:44 -07:00
Brennan BensonandNeil 85cec26773 Prevent unsigned Windows app releases (#6806)
* Verify Windows app executable signing

* Isolate Windows signing verifier tests

* Handle direct Windows installer extraction

---------

Co-authored-by: Neil <neil@stably.ai>
2026-07-02 10:54:19 -07:00
Brennan BensonandOrca 22db5b78d6 Fix Windows bundled ConPTY packaging (#6968)
Co-authored-by: Orca <help@stably.ai>
2026-06-30 18:05:38 -07:00
Neil 7cfae28115 ci: isolate Blacksmith mac release build (#6962) 2026-06-30 16:36:59 -07:00
Brennan BensonandOrca 9408cadb80 ci: keep release workflow GitHub-hosted for SignPath (#6946)
Co-authored-by: Orca <help@stably.ai>
2026-06-30 14:58:43 -07:00
Brennan BensonandOrca 16de859fdf ci: isolate mac release build from SignPath matrix (#6937)
Co-authored-by: Orca <help@stably.ai>
2026-06-30 13:55:48 -07:00
Brennan BensonandOrca 22e9c4f4bb ci: pin Windows release runner to VS 2022 (#6932)
Co-authored-by: Orca <help@stably.ai>
2026-06-30 13:21:32 -07:00
NeilandOrca 677fc4319e ci: run signed macOS release build on Blacksmith (6 vCPU) — ~2x faster (#6882)
Co-authored-by: Orca <help@stably.ai>
2026-06-30 02:32:27 -07:00
Brennan BensonandOrca c6299f8b85 Improve Windows release signing reliability (#6292)
Co-authored-by: Orca <help@stably.ai>
2026-06-24 14:24:42 -07:00
Neil d992062cf9 fix: publish linux release matrix artifacts (#6111) 2026-06-22 18:28:01 -07:00
Neil 531bcc9a0e build: publish linux arm64 release artifacts (#4755) 2026-06-22 01:07:16 -07:00
Jinjing 240b5e0a1f ci: disable Windows rendering release evidence (#5898) 2026-06-20 13:25:54 -07:00
Jinjing c36a14032f Temporarily disable Windows golden E2E CI (#5897) 2026-06-20 02:11:18 -07:00
OrcaWinandNeil 4ea550bbef fix(release): sign Windows installers with SignPath
Co-authored-by: Neil <neil@stably.ai>
2026-06-19 14:06:21 -07:00
Brennan BensonandOrca ce273c8aef Improve release validation reliability (#5643)
Co-authored-by: Orca <help@stably.ai>
2026-06-17 20:05:55 -07:00
Brennan BensonandOrca 9885ff9760 Add crash report diagnostic log upload (#2580)
Co-authored-by: Orca <help@stably.ai>
2026-06-16 18:05:15 -07:00
Neil 4660a25f09 Gate releases on terminal rendering golden 2026-06-08 20:49:17 -07:00
Jinwoo-HandOrca 8b453d014b ci: gate release-cut to the canonical repo so it skips forks (#4815)
Co-authored-by: Orca <help@stably.ai>
2026-06-08 16:57:55 -07:00
Neil 5185ff3bf2 Use semver max for latest stable release (#4622)
Select the latest stable desktop release by numeric semver instead of trusting release list order.
2026-06-03 23:42:33 -07:00
Neil c60744ec22 Harden release tag recovery
Recover unpublished current-ref stable tags and use package.json as the stable version floor when GitHub Releases regresses after a deleted release.
2026-06-03 18:38:03 -07:00
Neil a04c8c1e91 Advance stable cuts past stale tags (#4379) 2026-06-01 02:38:43 -07:00
Neil 6bd6c6fda0 Fix release note body limit (#4378) 2026-06-01 02:35:19 -07:00
Neil 7eee8321b0 fix: keep RC release retries monotonic (#3985) 2026-05-30 21:46:13 -07:00
Neil 4f682631ad release: add Homebrew RC cask channel (#3462) 2026-05-29 22:34:44 -07:00
Emad Fussi 7337cab2d8 feat(linux): add RPM package target and rename CLI to orca-ide
Adds an RPM Linux package target and renames the Linux CLI command to orca-ide to avoid shadowing GNOME Orca, while preserving macOS and Windows CLI command behavior.\n\nFollow-up hardening keeps the Linux launcher executable, removes only old Orca-managed Linux/WSL orca launchers during migration, preserves AppImage/deb artifact names, and updates package/release tests for the RPM asset.
2026-05-29 16:57:56 -07:00
Neil e53300a4be ci: upgrade GitHub Actions to Node 24 (#2978) 2026-05-28 00:07:04 -07:00
Neil f9406ea23c Handle already-bumped patch release cuts
Allow release-cut to create an empty release commit when main already contains the computed package.json version from a failed unpublished cut.
2026-05-27 17:29:48 -07:00
Brennan Benson 2541f64dc6 Fix Windows release publish command (#2905) 2026-05-27 01:12:51 -07:00
Brennan BensonandOrca b36df114d1 Preserve update nudges during release publishing (#2878)
Co-authored-by: Orca <help@stably.ai>
2026-05-26 20:56:11 -07:00
Neil b1b722aaef ci: keep release e2e non-blocking (#2584) 2026-05-21 20:12:36 -07:00
Neil 0322083c88 Fix release E2E flakes and gate publish
Gate release publishing on tag-scoped E2E, harden Droid agent-status routing against renderer layout races, and stabilize the affected E2E setup helpers.
2026-05-21 14:16:01 -07:00
Neil 5b6f373769 Remove release visibility monitor job (#2173) 2026-05-17 15:42:57 -07:00
Neil c0884f5f21 Fix release-cut draft RC recovery (#1942)
* fix: recover stuck draft RC releases

* fix: address release recovery lint
2026-05-15 11:33:05 -07:00
Neil 2d9cf72084 fix: verify macOS entitlements before release 2026-05-14 19:02:37 -07:00
Brennan BensonandOrca e361b4339e fix(release): harden prerelease update fallback checks (#1793)
Co-authored-by: Orca <help@stably.ai>
2026-05-13 21:45:33 -07:00
Neil 9859879960 Revert Windows SignPath signing (#1713)
* Revert "Fix signed Windows updater checksum metadata (#1712)"

This reverts commit 61f3d7c50e.

* Revert "Sign Windows releases with SignPath (#1300)"

This reverts commit ffa06c2b4a.
2026-05-12 00:48:33 -07:00
Neil 61f3d7c50e Fix signed Windows updater checksum metadata (#1712) 2026-05-12 00:30:22 -07:00
Neil ffa06c2b4a Sign Windows releases with SignPath (#1300) 2026-05-11 23:18:12 -07:00
Neil 34b537aa9c fix(release): install linux computer-use deps 2026-05-11 15:52:24 -07:00
Neil 6630cf6295 fix(release): handle orphaned release lookup (#1523) 2026-05-06 21:40:17 -07:00
Brennan BensonandOrca f90da6ea37 ci(telemetry): inject ORCA_POSTHOG_WRITE_KEY + ORCA_BUILD_IDENTITY at release build time (#1418)
Co-authored-by: Orca <help@stably.ai>
2026-05-04 21:43:22 -07:00
NeilandOrca c58e06383c fix(release): filter desktop-only tags and consolidate release pipeline (#1386)
- release-cut.yml: require `^v[0-9]` tag shape when picking "latest
  stable" from GitHub releases. Previously only `-rc.*` was excluded, so
  publishing `mobile-v0.0.1` made it the latest stable, `strip_pre()`
  reduced it to `mobile`, `Number("mobile")` → NaN → 0, and a patch-bump
  produced `v0.0.1` (run 25304336767).
- homebrew-bump.yml: drop the blanket `release.published` trigger and
  add tag-shape guards. Any published release in this repo (including
  mobile) would otherwise fire the tap bump. Workflow_call from the
  desktop pipeline is the only intended path now.
- Inline create-release / build / publish-release / e2e / homebrew-bump
  jobs from release.yml into release-cut.yml, and delete release.yml.

Co-authored-by: Orca <help@stably.ai>
2026-05-04 00:21:21 -07:00
Neil 8ae119558b fix: simplify release pipeline (#1362) 2026-05-02 14:17:21 -07:00
NeilandOrca 74a7a3c790 fix(release): grant actions:write on callers of release.yml (#1341)
release.yml's publish-release job got `actions: write` in f6cc2aee so it
can dispatch homebrew-bump.yml, but reusable-workflow permissions are
capped by the caller. release-cut.yml and release-rc.yml only listed
`contents: write`, so the first cut after f6cc2aee died with
startup_failure (run 25244518794) before any job could start.

Grant `actions: write` on both callers to match what release.yml needs.

Co-authored-by: Orca <help@stably.ai>
2026-05-01 22:34:26 -07:00
NeilandOrca 6303bdb50f fix(release): recover orphan tags instead of hard-failing the cut (#1335)
If a cut pushes the tag but the workflow is cancelled (or the dependent
release.yml job otherwise fails to start) before a GitHub release is
published, every subsequent patch cut recomputes the same version and
dies on "Tag already exists." This wedged the pipeline on 2026-05-01
when v1.3.26 was pushed by cancelled run 25237882049 — patch cuts kept
failing for hours until release.yml was dispatched by hand.

When the tag exists but no published release is attached, skip the
bump/push steps and emit the existing tag as the job output so
release.yml runs against it and finishes what the prior attempt
started. Still refuse the collision when a real published release
exists — that's a genuine conflict (e.g. a hand-tagged version) and
needs human attention.

Co-authored-by: Orca <help@stably.ai>
2026-05-01 20:13:46 -07:00