Josh Avant bd4db5ee62 Add dependency release safety evidence and PR awareness (#81325) ...

* test: cover dependency pin guard

* build: add dependency vulnerability gate

* build: add dependency risk report

* build: add dependency drift reports

* build: include dependency ownership surface evidence

* build: rename dependency report commands

* build: respect release age exclusions in risk report

* build: clarify transitive risk accounting

* build: remove transitive risk exception registry

* build: clarify transitive risk signal wording

* ci: attach dependency evidence to release preflight

* ci: extract dependency release evidence generator

* build: rename ownership surface dependency report

* ci: clarify release evidence naming

* build: clarify recently published risk report

* build: reorder transitive risk report sections

* build: fix ownership surface pluralization

* ci: surface dependency changes on PRs

* ci: harden dependency change awareness

* ci: use dependency changed PR label

* build: fix dependency report lint

* docs: add dependency safety changelog

2026-05-13 03:05:09 -05:00

..

auto-response.yml

Require real behavior proof for external PRs (#77622)

2026-05-05 05:45:30 +01:00

ci-build-artifacts-testbox.yml

ci: verify and sync website installers (#80067)

2026-05-09 23:48:49 -04:00

ci-check-testbox.yml

ci: skip Testbox workflow checks for draft PRs

2026-05-06 22:06:59 +01:00

ci.yml

ci: keep main push checks running

2026-05-12 08:35:36 +01:00

clawsweeper-dispatch.yml

ci: keep ClawSweeper comment dispatch best effort

2026-05-11 11:02:00 +01:00

codeql-android-critical-security.yml

ci: schedule android codeql shard (#73430)

2026-04-28 01:54:57 -07:00

codeql-critical-quality.yml

chore(channels): remove bluebubbles bundled surface

2026-05-07 12:52:48 -07:00

codeql-macos-critical-security.yml

ci: split macos codeql shard

2026-04-28 03:14:07 -07:00

codeql.yml

chore(ci): widen CodeQL PR guard

2026-04-29 20:06:50 -07:00

control-ui-locale-refresh.yml

feat(i18n): align docs and ui locales

2026-04-29 10:25:47 -07:00

crabbox-hydrate.yml

test(e2e): fix kitchen sink crabbox coverage (#76287)

2026-05-02 18:39:26 -07:00

dependency-change-awareness.yml

Add dependency release safety evidence and PR awareness (#81325)

2026-05-13 03:05:09 -05:00

docker-release.yml

feat: support alpha releases

2026-05-02 18:29:13 +01:00

docs-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

docs-sync-publish.yml

docs: add dedicated ClawHub docs tab (#79159)

2026-05-07 18:55:08 -07:00

docs-translate-trigger-release.yml

ci: dispatch aggregate docs translations

2026-05-06 20:24:03 +01:00

docs.yml

ci: split docs-only push checks

2026-04-24 17:41:04 +01:00

duplicate-after-merge.yml

ci: add duplicate PR cleanup workflow

2026-04-23 18:41:32 +01:00

full-release-validation.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

install-smoke.yml

fix(ci): keep Docker patch smoke on pnpm workspace config

2026-05-11 00:48:14 +01:00

labeler.yml

chore: Update active PR limit to 20

2026-05-03 19:15:55 -05:00

live-media-runner-image.yml

chore(deps): bump actions group

2026-04-29 21:48:30 -07:00

macos-release.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

maintainer-command-reactions.yml

ci: rename clawsweeper automation labels

2026-04-29 10:18:57 +01:00

mantis-discord-smoke.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

mantis-discord-status-reactions.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

mantis-discord-thread-attachment.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

mantis-scenario.yml

ci(mantis): add agentic telegram desktop proof

2026-05-11 08:15:34 +05:30

mantis-slack-desktop-smoke.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

mantis-telegram-desktop-proof.yml

ci(mantis): fix telegram run wait before checkout

2026-05-12 10:39:27 +05:30

mantis-telegram-live.yml

ci(mantis): fix telegram run wait before checkout

2026-05-12 10:39:27 +05:30

npm-telegram-beta-e2e.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

openclaw-cross-os-release-checks-reusable.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

openclaw-live-and-e2e-checks-reusable.yml

ci: bound live cache release retries

2026-05-11 02:36:17 +01:00

openclaw-npm-release.yml

Add dependency release safety evidence and PR awareness (#81325)

2026-05-13 03:05:09 -05:00

openclaw-performance.yml

ci: retry performance report publishes

2026-05-03 14:32:35 +01:00

openclaw-release-checks.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

openclaw-release-publish.yml

Add dependency release safety evidence and PR awareness (#81325)

2026-05-13 03:05:09 -05:00

openclaw-scheduled-live-checks.yml

ci: pass provider secrets to testbox

2026-04-28 04:24:15 +01:00

opengrep-precise-full.yml

ci: right-size OpenGrep PR scan

2026-04-30 01:52:12 -07:00

opengrep-precise.yml

ci: shallow checkout OpenGrep PR scan

2026-04-30 02:43:00 -07:00

package-acceptance.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

plugin-clawhub-release.yml

ci: speed up beta release verification

2026-05-12 06:21:09 +01:00

plugin-npm-release.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

plugin-prerelease.yml

ci: add plugin inspector prerelease advisory

2026-05-11 12:46:33 +01:00

qa-live-transports-convex.yml

ci(pnpm): use pnpm 11 in workflows

2026-05-11 00:48:14 +01:00

real-behavior-proof.yml

Require real behavior proof for external PRs (#77622)

2026-05-05 05:45:30 +01:00

sandbox-common-smoke.yml

chore: clean up root clutter

2026-05-03 12:20:52 +01:00

stale.yml

fix(ci): bound manual stale closure backfill

2026-04-30 03:52:23 -07:00

test-performance-agent.yml

chore: move swabble into apps

2026-05-03 13:10:25 +01:00

update-migration.yml

test: add update migration package gate

2026-05-02 00:34:33 +01:00

website-installer-sync.yml

chore(installer): remove legacy cmd installer

2026-05-10 06:59:33 +01:00

windows-blacksmith-testbox.yml

ci: preserve Windows Testbox phone-home POST

2026-05-03 22:28:30 -07:00

windows-testbox-probe.yml

ci: expand Windows WSL probe runners

2026-05-03 21:32:35 -07:00

workflow-sanity.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00