Dashboard › publish › Distillation
85836f02-ed72-4afc-96e6-5db9ad708ce0["lore_tm_v1_UyoOSUGBN9PWARmumFNmIEtwnJ_foxx8wYAX4hMOsBo","lore_tm_v1_Fds6kjLrSLz9S9JEtDA3w1gyzFnE4FdZ26Pwkot39e4","lore_tm_v1_73ZI2krBZlFvfFK6SIuS6JSHJ50CMvTf8H4JUIaBxj8"]
HEAD was 83d210b29553ea6f4d97508821724a834c43856e, origin/main was 7c60ddb7f43040fe8fbfea70efc833f689c04e75, and HEAD was the merge base, making origin/main exactly one commit ahead.git apply --check found direct conflicts in both workflows, .github/workflows/cocoapods-keepalive.yml, src/modules/details-from-context.js, src/modules/update-issue.js, and src/publish/inputs.js; package, lock, documentation, and new files applied textually, while several tests conflicted semantically with the security work.package.json + yarn.lock add peggy 5.1.0; scripts/generate-publish-issue-title-parser.js consumes src/modules/publish-issue-title.peggy and generates src/modules/publish-issue-title.js plus the title section of docs/publish-issue-format.md.src/modules/publish-issue-title.js feeds src/modules/release-revision.js → src/modules/details-from-context.js and src/publish/resolve-release-revision.js; it also feeds src/modules/ci-poller-input.js → src/publish/resolve-ci-poller-input.js.src/modules/publish-issue-validation.js + src/modules/publish-location.js feed src/modules/details-from-context.js, src/modules/ci-poller-input.js, src/publish/discover-location.js, and src/publish/resolve-location.js; target regexes in src/modules/details-from-context.js feed src/modules/update-issue.js./home/byk/Code/getsentry/publish/src/modules/publish-issue-title.js, a 1,473-line Peggy 5.1.0 generated artifact, must never be hand-merged. It exports PublishIssueTitle, ReleaseRevision, and CheckRunsLinkCount at origin/main:1469-1472./home/byk/Code/getsentry/publish/src/modules/publish-location.js validates every path and discovered workspace segment: root remains {path: "."}, an exact case-sensitive workspace match becomes {path: ".", workspace}, and every other safe suffix remains a checkout path (origin/main:1-21,24-53). It never normalizes names./home/byk/Code/getsentry/publish/src/modules/ci-poller-input.js validates title repository, version, and path before CI API use and then reads the canonical body SHA (origin/main:12-30). It returns repository, current revision, and version; with a replacement revision it also returns a rewritten body (origin/main:32-39), but revision remains the old/current body SHA in rewrite mode./home/byk/Code/getsentry/publish/src/modules/details-from-context.js:18-22,69-74 exports parsePublishTitle and PUBLISH_TITLE_REGEX, consumed by /home/byk/Code/getsentry/publish/src/modules/approval-authorizer.js:2,16,28; upstream removes both exports and throws Peggy syntax errors rather than returning null, so taking upstream unchanged would break authorization at module load./home/byk/Code/getsentry/publish/src/modules/update-issue.js:64-78 uses inputs?.version, allowing accepted removal when parsing fails; upstream correctly switches to trusted state-file output, but its wrapper still parses PUBLISH_ARGS before invoking the module./home/byk/Code/getsentry/publish/src/publish/update-issue.js:5-25 may retain or simplify its dirty wrapper, and tests must account for upstream setting CRAFT_STATE_FILE_PATH because the current “without inputs” test otherwise inherits that path./home/byk/Code/getsentry/publish/.github/workflows/ci-poller.yml:48-75, while upstream adds mutable checkout@v7 after token creation and expects .__publish__.node src/publish/resolve-ci-poller-input.js; 2. pin and move the new checkout before every credential step./home/byk/Code/getsentry/publish/src/modules/approval-attestation.js:14-28, while upstream automatically rewrites the check-runs SHA and continues toward ci-ready, necessarily invalidating the accepted-event attestation.accepted and ci-pending, and require fresh approval before checking or publishing the new SHA./home/byk/Code/getsentry/publish/src/modules/__tests__/ci-poller-input.js (origin/main:17-97) for CI input validation before API use, and /home/byk/Code/getsentry/publish/src/modules/__tests__/ci-poller-workflow.js (origin/main:152-197) for resolver failure, malformed rewrite output, cleanup, and byte preservation.approval-authorizer rejects unsafe repositories, paths, and versions without permission lookup; 2. qualified/unqualified titles and root path: "" compatibility; 3. canonical SHA rewrite removes approval and never reaches ci-ready in the same cycle; 4. live issue/title/body/accepted-event revalidation after CI and immediately before ci-ready; 5. immutable Craft digest in workflow YAML and discover-location.js; 6. full-SHA action pinning while retaining checkout-v7 behavior; 7. malformed or absent PUBLISH_ARGS still removes accepted; 8. missing CRAFT_STATE_FILE_PATH never reads a file; 9. direct resolve-ci-poller-input.js file-precedence and malformed-input behavior; 10. getCiPollerInput rewrite-mode revision semantics ensure callers cannot mistake the returned old revision for the replacement.origin/main as the baseline and initiated a fast-forward with Git tracked-change autostash, intending to reapply the security patch through conflicts, leave .lore.md and all other untracked work untouched, and resolve only overlapping files.83d210b..7c60ddb and created autostash aa5efe2; applying the autostash produced conflicts, with the changes retained safely in the stash for git stash pop or git stash drop..github/workflows/ci-poller.yml, .github/workflows/cocoapods-keepalive.yml, .github/workflows/publish.yml, README.md, docs/publish-issue-format.md, package.json, scripts/generate-publish-issue-title-parser.js, src/modules/__tests__/ci-poller-input.js, src/modules/__tests__/ci-poller-workflow.js, src/modules/__tests__/details-from-context.js, src/modules/__tests__/generate-publish-issue-title-parser.js, src/modules/__tests__/publish-location.js, src/modules/__tests__/publish-workflow.js, src/modules/__tests__/release-revision.js, src/modules/__tests__/update-issue.js, src/modules/ci-poller-input.js, src/modules/details-from-context.js, src/modules/publish-issue-title.js, src/modules/publish-issue-title.peggy, src/modules/publish-issue-validation.js, src/modules/publish-location.js, src/modules/release-revision.js, src/modules/update-issue.js, src/publish/__tests__/discover-location.js, src/publish/__tests__/resolve-location.js, src/publish/__tests__/resolve-release-revision.js, src/publish/discover-location.js, src/publish/inputs.js, src/publish/resolve-ci-poller-input.js, src/publish/resolve-location.js, src/publish/resolve-release-revision.js, and yarn.lock.docs/publish-issue-format.md, scripts/generate-publish-issue-title-parser.js, src/modules/__tests__/ci-poller-input.js, src/modules/__tests__/ci-poller-workflow.js, src/modules/__tests__/generate-publish-issue-title-parser.js, src/modules/__tests__/publish-location.js, src/modules/__tests__/publish-workflow.js, src/modules/__tests__/release-revision.js, src/modules/ci-poller-input.js, src/modules/publish-issue-title.js, src/modules/publish-issue-title.peggy, src/modules/publish-issue-validation.js, src/modules/publish-location.js, src/modules/release-revision.js, src/publish/__tests__/discover-location.js, src/publish/__tests__/resolve-location.js, src/publish/__tests__/resolve-release-revision.js, src/publish/discover-location.js, src/publish/resolve-ci-poller-input.js, src/publish/resolve-location.js, and src/publish/resolve-release-revision.js.