9 Commits

Author SHA1 Message Date
chenpei
c4eff7b2bb build: compile canvas without external binary download 2026-08-12 21:20:58 +08:00
chenpei
b2aac04c13 test: make release gates portable on Windows 2026-08-12 20:43:09 +08:00
chenpei
343b88cb98 fix: parse immutable registry digest 2026-08-12 20:00:13 +08:00
chenpei
a39208802e fix: resolve OCI image manifest digest 2026-08-12 19:52:15 +08:00
chenpei
fb6187a0b1 fix: streamline verified release builds 2026-08-12 19:44:23 +08:00
chenpei
4a6fa92589 fix: verify production host key on build server 2026-08-12 19:16:30 +08:00
chenpei
020006ceb7 fix: bound HTTP Gitea release fetches 2026-08-12 18:55:38 +08:00
chenpei
7c5f42ca40 fix: support pinned HTTP Gitea releases 2026-08-12 18:25:08 +08:00
chenpei
7326e273e1 fix: harden media upload and release safety
Protect upload cleanup and atomic completion paths, add durable media worker leases and brand asset validation, and introduce verified migration/bootstrap/deployment gates.
2026-08-12 18:04:08 +08:00