Stop creating GitHub issues for store submissions #30

Merged

backmeupplz merged 1 commit from ticket-64-no-store-issues into main

2026-10-09 03:06:58 +00:00

backmeupplz commented

2026-10-09 02:58:00 +00:00

(Migrated from github.com)

Summary

Stop store-report issue discovery, creation and updates; report only to Actions summaries/logs, without GH_TOKEN or issues:write. Existing issues remain untouched.
Preserve submission/selection logic, attempt-aware outcomes, release journal receipts, artifacts, signing/OIDC, store pauses and publication policy.
Add credential-free entrypoint tests covering success, failure, partial/all-paused, full and failed-only reruns; update release documentation.

Agentboard: https://agentboard.icefish-betta.ts.net/#64

Validation

Python release suite: 50 tests, 49 passed / 1 skipped (local JDK signer prerequisite unavailable).
npm ci, npm test, Chrome and Firefox builds, TypeScript noEmit and git diff --check: passed on Node 26.8.2.
PR CI passed: https://github.com/backmeupplz/plainwallet/actions/runs/37877067085 — credential-free tests, both extensions, strict Android build, immutable artifact checks and artifact upload. Release-only select/submit/report jobs correctly skipped; local JDK 21/Android SDK unavailable.
Independent exact-head Astra/high review: no findings on 3f23d8f39a. Reviewer ran all 50 Python tests (zero skips, disposable JDK signer included); focused base red/head green confirmed forbidden network attempts, token dependency and issue permission regressions. Review run: 9f41f8b9-a405-4f78-b672-b0fe3c88e62f.
npm reports one existing high-severity dependency advisory; no dependency or lockfile changes in this PR.

Deployment boundary

Workflow deployment is merge. No version bump, new release, live submission, old release rerun or existing issue edits were performed or authorized. The next real release must include this workflow commit; live next-release behavior remains unexercised.

## Summary - Stop store-report issue discovery, creation and updates; report only to Actions summaries/logs, without GH_TOKEN or issues:write. Existing issues remain untouched. - Preserve submission/selection logic, attempt-aware outcomes, release journal receipts, artifacts, signing/OIDC, store pauses and publication policy. - Add credential-free entrypoint tests covering success, failure, partial/all-paused, full and failed-only reruns; update release documentation. Agentboard: https://agentboard.icefish-betta.ts.net/#64 ## Validation - Python release suite: 50 tests, 49 passed / 1 skipped (local JDK signer prerequisite unavailable). - npm ci, npm test, Chrome and Firefox builds, TypeScript noEmit and git diff --check: passed on Node 26.8.2. - PR CI passed: https://github.com/backmeupplz/plainwallet/actions/runs/37877067085 — credential-free tests, both extensions, strict Android build, immutable artifact checks and artifact upload. Release-only select/submit/report jobs correctly skipped; local JDK 21/Android SDK unavailable. - Independent exact-head Astra/high review: no findings on 3f23d8f39ac2dfee20c4aa46a6393d7802ae3a0c. Reviewer ran all 50 Python tests (zero skips, disposable JDK signer included); focused base red/head green confirmed forbidden network attempts, token dependency and issue permission regressions. Review run: 9f41f8b9-a405-4f78-b672-b0fe3c88e62f. - npm reports one existing high-severity dependency advisory; no dependency or lockfile changes in this PR. ## Deployment boundary Workflow deployment is merge. No version bump, new release, live submission, old release rerun or existing issue edits were performed or authorized. The next real release must include this workflow commit; live next-release behavior remains unexercised.