Dashboard › publish › Distillation
64287724-f390-4351-b25d-6e348a842a01["lore_tm_v1_jF0QJrttWsQehDZCDgBZcRxFowiVSx09skCdvyGitXM","lore_tm_v1_1hseikgyKH7t-HUQ1oi-ssE772LPDIQGPTaQJ0Ftcl8","lore_tm_v1_8Lq5bLWIhuv1O94Ah1_B20DNjlob-DodY9yfm75D1pE","lore_tm_v1_ilRRWZbJP_GUkYjNpvHxjDy_L3jKDqXOdL5XnKVcVrc"]
workflow_dispatch can target any ref and directed: “Always run trusted code.”.github/workflows/auto-approve.yml was hardened with issues: write, environment: production, automated approval attestation recording, and immutable action revisions: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 and actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1.repository_dispatch, ensure manually dispatched runs switch to trusted code, parse the canonical publish title before inspecting CI, validate approval state so changed/renamed/re-approved issues cannot reach ci-ready, and dispatch {event_type: "ci-poller", client_payload: {attempt: $attempt}}.src/modules/details-from-context.js exposes parsePublishTitle; regression tests in src/modules/__tests__/details-from-context.js verify publish: getsentry/sentry-javascript/packages/core@10.0.0 parses to { path: "/packages/core", repo: "sentry-javascript", version: "10.0.0" }, while legacy publish: sentry-javascript@10.0.0 parses to { path: undefined, repo: "sentry-javascript", version: "10.0.0" }.src/modules/update-issue.js now calls updateTargets() only when inputs?.version is present, passing version: inputs.version, while label removal remains part of the parallel Promise.all() cleanup.src/publish/update-issue.js gained guarded publish-argument handling so malformed or absent inputs do not prevent issue cleanup; related regression coverage was added in src/modules/__tests__/update-issue.js.README.md now documents that secret-bearing jobs use the protected production environment, allow only main deployments, and disallow administrator bypass; it also states that organization-level availability of SENTRY_INTERNAL_APP_PRIVATE_KEY and SENTRY_RELEASE_BOT_PRIVATE_KEY must be managed separately by Security.AGENTS.md now links project-root .lore.md as the location for long-term gotchas, patterns, decisions, and architecture maintained through lore (https://github.com/BYK/loreai).src/libs/github.js, src/libs/__tests__/github.js, src/modules/process-end-state.js, src/publish/inputs.js, src/publish/post-result.js, src/publish/update-issue.js, docs/key_rotation_vault_changes.md, and docs/rfc.md, including double quotes, spacing, indentation, trailing-comma removal where formatted, and final newlines.1.22.22: eslint src .github --ignore-pattern '!.github'; exit was successful with Done in 2.38s.