Dashboard › publish › Distillation
c195051d-6509-4ef5-8266-15a25f6c25b2["lore_tm_v1_bVhZh3cUEpWQGbizoQyfCw4UDfVLxdZT6bkhMRKOIXg","lore_tm_v1_Ruh121sU8bhTlhVsGiOqmixyUtwVShS7ORmTj4RyeBE","lore_tm_v1_Mfojd9EFd4Uc4P880GwC9O5uK3F3pqWyenjBz_cVGsg","lore_tm_v1_QDJzne3CAlno1e0RLLjjQLpd5MX6_GzCfnypUOpoQ38","lore_tm_v1_zn3RXy0bahekZxUGS6wXIZSbXcpnjIf1za77nOPN9kE"]
main/origin/main/origin/HEAD was at 7c60ddb (feat: accept workspace publish requests); recent history included 83d210b (build(deps): bump js-yaml from 4.3.0 to 4.3.1 (#9174)), 5268a23 (feat: Add Vercel creds), 92eba3f (feat: Add CLOUDFLARE_API_TOKEN (#9122)), ada6147 (build(deps): bump js-yaml from 4.1.1 to 4.3.0 (#8731)), a4f961a (fix: Add GITHUB_API_TOKEN for commit-on-git target (#9069)), bf10f82 (build(deps): bump postcss from 8.5.15 to 8.5.23 (#9017)), 837edc0 (docs: fix possessive apostrophe placement (#9015)), 4da4a25 (chore: replace deprecated trimRight() with trimEnd() (#9012)), and 22fd64d (docs: fix typo 'acces' -> 'access' (#9011)).trimRight() was replaced with trimEnd() in change #9012, commit 4da4a25..github/workflows/auto-approve.yml, .github/workflows/ci-poller.yml, .github/workflows/publish.yml, .github/workflows/test.yml, AGENTS.md, README.md, docs/key_rotation_vault_changes.md, docs/rfc.md, GitHub/release/publishing modules, and their tests.workflow_dispatch for manual recovery.workflow_dispatch can target any ref, always run trusted code.ci-ready after it changes while CI is being inspected.ci-ready..github/workflows/ci-poller.yml added support for github.event_name == 'repository_dispatch', approval binding/request-digest checks, approval attestations, and removal of ci-ready when required; a failure to bind an approval event emits ::warning::Could not bind approval event for issue #${number}. Removing accepted.The publish request could not be updated to the current release revision. Fix the request and re-add the accepted label to retry..github/workflows/auto-approve.yml at /home/byk/Code/getsentry/publish/.github/workflows/auto-approve.yml is a 57-line workflow named auto-approve non-sdks, triggered only by issues: types: [opened], with permissions contents: read and issues: write..github/workflows/auto-approve.yml job auto-approve runs on ubuntu-latest in the production environment only when the actor is sentry-release-bot[bot] or getsantry[bot] and the issue title starts with publish: .actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with persist-credentials: false, and pins GitHub App token creation to actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1, using vars.SENTRY_INTERNAL_APP_ID and the secret SENTRY_INTERNAL_APP_PRIVATE_KEY.node src/publish/request-digest-from-event.js, then records automated approval via node src/publish/record-auto-approval-attestation.js with APPROVAL_TOKEN, APPROVAL_ISSUE_NUMBER, APPROVAL_ISSUE_REPOSITORY, APPROVAL_ISSUE_TITLE, AUTO_APPROVER, and EXPECTED_REQUEST_DIGEST.${{ steps.attestation.outputs.auto_approval_attestation }} using gh issue comment "$ISSUE_URL" --body "$AUTO_APPROVAL_ATTESTATION".ISSUE_TITLE using sed -n 's/^publish: \(.*\)@.*/\1/p'; it adds the accepted label with gh issue edit "$ISSUE_URL" --add-label accepted only when the extracted repository is non-empty and exactly matches a line in auto-approve-repos.txt via grep -qxF.