CI hardening prerequisite for issue #6487 (Windows Smart App Control). The
release pipeline only signed+verified the outer NSIS installer; nothing
asserted the inner extracted Orca.exe carried a valid Authenticode signature.
SAC evaluates that inner executable, so an unsigned Orca.exe could still ship
inside a signed installer.
Adds a cross-platform parsing module + unit tests and a release-cut.yml gate
that extracts the inner Orca.exe from the signed installer and fails the
release if it is not validly signed by the expected identity.
The actual recursive PE signing must be enabled server-side in SignPath's
artifact configuration; documented in the new gate and the script header.
Splits the combined Mobile Release workflow into mobile-ios-release.yml (mobile-ios-v* tags) and mobile-android-release.yml (mobile-android-v* tags) so iOS App Store review no longer gates Android. Also fixes iOS signing by passing the App Store Connect API key to build_app so xcodebuild can provision via -allowProvisioningUpdates.
Merged with --admin: the only failing check is the repo-wide pr.yml '@/lib/utils' vitest break affecting all PRs, unrelated to this change.
Adds an ios-build job to the Mobile Release workflow (build + sign + TestFlight upload on a macOS runner via fastlane + App Store Connect API key), and fixes a pre-existing Mobile Checks bug where the mobile typecheck needed root deps for ../src imports.
Merged with --admin: the only failing check is the repo-wide pr.yml '@/lib/utils' vitest resolution break affecting all open PRs, unrelated to this change.
Adds an RPM Linux package target and renames the Linux CLI command to orca-ide to avoid shadowing GNOME Orca, while preserving macOS and Windows CLI command behavior.\n\nFollow-up hardening keeps the Linux launcher executable, removes only old Orca-managed Linux/WSL orca launchers during migration, preserves AppImage/deb artifact names, and updates package/release tests for the RPM asset.
* Add rerun action for failed automations
Adds a recoverable failed automation rerun action in the run detail view, with pending-state handling and focused view-state coverage.
Design doc: docs/failed-automation-rerun-action.md
* Rebuild Electron binary before PR tests
- Ensure Node-based unit tests can import `electron` after install blocks package postinstall
- Generate Electron's required `path.txt` in the PR workflow
Gate release publishing on tag-scoped E2E, harden Droid agent-status routing against renderer layout races, and stabilize the affected E2E setup helpers.
brennanb2025
Brennan BensonandNeil
Neil
Jinwoo HongandOrca
Jinjing
OrcaWinandNeil
Jinwoo-HandOrca
pullfrog[bot]
Emad Fussi