Simon Scatton fa7dc26930 ci(release): add advisory compatibility review (#4200) ...

* ci(release): add advisory compatibility review

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

* test(ci): remove compatibility reviewer test harness

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

* ci(release): run compatibility SDK in the dev shell

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

* ci(release): trigger a one-shot compatibility review

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

* ci(release): remove one-shot review trigger

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

---------

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

2026-10-07 14:12:05 +00:00

..

vm

chore(vm): refresh runtime defaults and hardening (#3446)

2026-09-21 10:19:30 +00:00

alert_maintainer_change_test.py

feat(ci): add the maintainer approval decision tools (#3791)

2026-10-07 09:37:05 +00:00

alert_maintainer_change.py

feat(ci): add the maintainer approval decision tools (#3791)

2026-10-07 09:37:05 +00:00

build-env.sh

fix(build): raise open-file limit for host musl cross-compile on macOS (#2307)

2026-07-20 21:11:20 +00:00

check_docs_nav_test.py

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

check_docs_nav.py

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

check_maintainer_approval_test.py

feat(ci): add the maintainer approval decision tools (#3791)

2026-10-07 09:37:05 +00:00

check_maintainer_approval.py

feat(ci): add the maintainer approval decision tools (#3791)

2026-10-07 09:37:05 +00:00

check_proto_compatibility.py

fix(ci): qualify protobuf compatibility by release train (#4049)

2026-10-01 14:00:45 +00:00

check-cargo-lockfiles.ps1

fix(ci): upstream Windows SDK validation support (#3327)

2026-09-15 22:34:36 +00:00

check-cargo-lockfiles.sh

ci(rust): reject stale Cargo lockfiles (#3227)

2026-09-11 08:52:41 +00:00

codex_compatibility_report.py

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

codex_compatibility.py

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

codex_security_range_test.py

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

codex_security_range.py

fix(ci): restore Codex Security scan execution (#3124)

2026-09-03 07:38:51 +00:00

container-engine.sh

fix(build): align container engine selection (#1944)

2026-06-22 10:50:16 -05:00

docker-build-ci.sh

fix(ci): patch CI container vulnerability toolchain (#959)

2026-04-27 07:56:53 -07:00

docker-build-image.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

docker-publish-multiarch.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

e2e-build-workload.sh

refactor(runtime): retire Community image dependencies (#3386)

2026-09-22 14:43:51 +02:00

e2e-gpu-build-images.sh

refactor(runtime): retire Community image dependencies (#3386)

2026-09-22 14:43:51 +02:00

gateway-docker.sh

feat(docker): support corporate proxy CA bundles (#3549)

2026-09-29 05:15:02 +00:00

gateway-podman.sh

fix(sandbox): preserve local sessions across host sleep (#3573)

2026-09-24 17:22:30 +00:00

gateway-pull-policy.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

gateway-toml.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

gateway-vm.sh

chore(vm): refresh runtime defaults and hardening (#3446)

2026-09-21 10:19:30 +00:00

gateway.sh

refactor(runtime): retire Community image dependencies (#3386)

2026-09-22 14:43:51 +02:00

generate_python_proto.py

feat(api)!: use sandbox names as canonical RPC references (#3272)

2026-09-18 11:39:55 -07:00

generate-qualification-summary.sh

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

helm-k3s-local.sh

chore(kubernetes): update Agent Sandbox to v1.0.3 (#3578)

2026-09-23 18:30:24 +00:00

keycloak-k8s-setup.sh

fix(auth): harden OIDC trust root retrieval (#3332)

2026-09-15 17:00:45 +00:00

package-deb-install.sh

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

package-deb.sh

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

release.py

fix(homebrew): overwrite generated gateway config during migration (#3752)

2026-09-27 18:56:08 +00:00

run-git-bash.ps1

fix(ci): upstream Windows SDK validation support (#3327)

2026-09-15 22:34:36 +00:00

sandbox.sh

refactor(providers)!: make provider profiles import-only (#3383)

2026-09-17 22:59:27 +00:00

setup-zig-cc-wrapper.sh

chore(build): remove bundled Z3 support (#3275)

2026-10-01 12:08:33 +00:00

snap-gateway-wrapper.sh

fix(snap): require mTLS for the snap gateway (#3726)

2026-09-26 01:50:02 +00:00

stage-prebuilt-binaries.sh

chore(build): remove bundled Z3 support (#3275)

2026-10-01 12:08:33 +00:00

sync_docs_website_test.py

fix(docs): sync redirects with versioned snapshots (#3754)

2026-09-28 00:27:56 +00:00

sync_docs_website.py

fix(docs): sync redirects with versioned snapshots (#3754)

2026-09-28 00:27:56 +00:00

test-build-env.sh

fix(build): raise open-file limit for host musl cross-compile on macOS (#2307)

2026-07-20 21:11:20 +00:00

test-e2e-image-overrides.sh

feat(testing): support independent gateway and supervisor image overrides (#3341)

2026-09-23 23:35:30 +00:00

test-gateway-config.sh

test(e2e): remove schema parity campaign (#3864)

2026-10-01 13:17:20 +00:00

test-gateway-pull-policy.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

test-install-sh.sh

fix(install): stop waiting when the gateway service fails (#4143)

2026-10-03 19:59:57 +00:00

test-packaging-assets.sh

feat(gateway): support runtime image env overrides (#3504)

2026-10-05 12:23:13 +00:00

test-qualification-summary.sh

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

test-snap-gateway-wrapper.sh

fix(snap): require mTLS for the snap gateway (#3726)

2026-09-26 01:50:02 +00:00

test-snap-post-refresh-hook.sh

fix(snap): simplify snap hooks (#3988)

2026-10-01 15:10:38 +00:00

trivy-config-report.jq

ci(trivy): add artifact and PR configuration scans (#3185)

2026-09-09 13:58:06 +00:00

trivy-scan-test.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

trivy-scan.sh

chore(build): remove bundled Z3 support (#3275)

2026-10-01 12:08:33 +00:00

typescript-install.ps1

fix(ci): upstream Windows SDK validation support (#3327)

2026-09-15 22:34:36 +00:00

typescript-proto.ps1

fix(ci): upstream Windows SDK validation support (#3327)

2026-09-15 22:34:36 +00:00

verify-defaults-without-telemetry.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

verify-glibc-symbols.sh

fix(release): build host Linux binaries with glibc floor (#1490)

2026-05-22 12:12:03 -07:00

verify-image-sbom.sh

feat(build): publish OCI SBOM and provenance attestations (#2836)

2026-08-27 14:53:33 +00:00

verify-python-wheel.py

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

verify-static-binary.sh

chore(build): remove stale static-supervisor leftovers (#3520)

2026-09-22 00:19:37 +00:00

verify-telemetry-compiled-out.sh

feat(telemetry): add build-time option to compile out telemetry (#1845)

2026-06-09 14:19:26 -07:00

windows-msvc.ps1

docs(windows): align Z3 pin with z3-sys 0.13 (#3561)

2026-09-22 19:29:24 +00:00