Skip to content

docs: post-release v1.28.3 sync (README/CHANGELOG/AUDIT) - #535

Merged
qnbs merged 5 commits into
mainfrom
post-release-v1283-sync
Aug 27, 2026
Merged

docs: post-release v1.28.3 sync (README/CHANGELOG/AUDIT)#535
qnbs merged 5 commits into
mainfrom
post-release-v1283-sync

Conversation

@qnbs

@qnbsqnbs commented Aug 27, 2026

Copy link
Copy Markdown
Owner

User description

Summary

Mirrors PR #528's pattern for v1.28.2. Now that v1.28.3 is genuinely tagged and published:

  • Removes the release-candidate: v1.28.3 markers from README.md and CHANGELOG.md.
  • Records real, verified release-gate evidence in AUDIT.md (run IDs, job results, deploy evidence, release assets) — see commit message for the full list.

No functional code changes.

Test plan

  • pnpm run ci:prepush — local admission PASS (docs:check confirms "latest v1.28.3")
  • CI green on this PR

Summary by Sourcery

Finalize the documentation sync for the published v1.28.3 release.

Enhancements:

  • Synchronize release documentation with the published v1.28.3 status and preserve verified release-gate evidence in the audit record.

Documentation:

  • Remove obsolete v1.28.3 release-candidate markers from the README and CHANGELOG and document the release’s validation results, deployment evidence, container image, and published assets.

CodeAnt-AI Description

Synchronize documentation with the published v1.28.3 release

What Changed

  • Removes obsolete release-candidate markers from the README and CHANGELOG
  • Updates the audit record to identify v1.28.3 as released, including the onboarding fix, test coverage, security scan results, deployment verification, container image, and all published release assets
  • Records successful release workflows and confirms the earlier v1.28.2 end-to-end test issue did not recur

Impact

✅ Accurate v1.28.3 release status
✅ Verifiable release and deployment evidence
✅ Clearer documentation of published assets and quality checks

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

Summary by CodeRabbit

  • Documentation
    • Updated release documentation to identify v1.28.3 as the current release.
    • Refreshed test, localization, deployment, and validation metrics.
    • Removed obsolete release-candidate markers while retaining the visible release badge.
    • Added release-gate validation details and historical context for the previous release.

Removes the now-stale release-candidate markers from README.md and
CHANGELOG.md now that v1.28.3 is genuinely tagged and published, and
records real release-gate evidence in AUDIT.md: main CI/CD run
33113772841 (with real GitHub Pages Deployments API evidence),
CodeQL SAST run 33113772797 (0 open alerts), tag-triggered Tauri
workflow 33115805027 (all 5 jobs), tag-triggered CI/CD run 33115805002
(E2E passed, no repeat of the v1.28.2 tag-run flake), and the Docker
workflow 33115804967 (ghcr.io/qnbs/worldscript-studio pushed with a
real digest, tagged 1.28.3/1.28/latest). All 15 GitHub Release assets
uploaded successfully.
@codeant-ai

codeant-aiBot commented Aug 27, 2026

Copy link
Copy Markdown

🤖 CodeAnt AI — Review Status

StatusCommitStarted (UTC)Finished (UTC)
✅ Reviewed your PR93f7c9bAug 27, 2026 · 21:2421:25

@qodo-code-review

Copy link
Copy Markdown

ⓘ Qodo reviews are paused because your trial has ended. Ask your workspace admin to add credits to resume reviews. Manage billing

@sourcery-aisourcery-aiBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry @qnbs, you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 4 days and 13 hours by commenting @sourcery-ai review. Upgrade to get a review now.

@codeant-ai

Copy link
Copy Markdown

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

@vercel

vercelBot commented Aug 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
worldscript-studioReadyReadyPreviewAug 27, 2026 10:02pm

@sourcery-ai

Copy link
Copy Markdown
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This documentation-only sync replaces stale v1.28.3 candidate markers with published-release truth and extends the audit trail with verified CI/CD, security, deployment, container, and release-asset evidence; no functional code is changed.

File-Level Changes

ChangeDetailsFiles
Promote v1.28.3 from release-candidate to published-release documentation.
  • Remove stale release-candidate markers from the README and changelog.
  • Add an Unreleased documentation entry describing the post-release truth sync.
README.md
CHANGELOG.md
Record verified v1.28.3 release-gate and artifact evidence.
  • Update the current-version audit entry with the release tag, validated commit, fixes, test counts, and locale coverage.
  • Add CI/CD, CodeQL, deployment, tag-workflow, Docker, asset, and release provenance evidence, including run IDs and known platform-signing limitations.
  • Retain and annotate the historical v1.28.2 release-gate record, noting the v1.28.3 fixes.
AUDIT.md

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@codeant-aicodeant-aiBot added the size:S This PR changes 10-29 lines, ignoring generated files label Aug 27, 2026
@codeant-ai

codeant-aiBot commented Aug 27, 2026

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit:aaad4a1f
Scan Time: 2026-08-27 22:02:23 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality GateStatusDetails
Secrets✅ PASSED0 secrets found
Duplicate Code✅ PASSED0.0% duplicated
SAST✅ PASSEDNo security issues
Bugs✅ PASSEDRating S: No bugs
IAC✅ PASSEDNo IAC issues

View Full Results

@amazon-q-developeramazon-q-developerBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review Summary

This PR updates documentation for version 1.2.0, including audit logs, changelog, and README improvements. All changes are documentation-only and properly formatted. No blocking issues identified.

Changes Reviewed:

  • AUDIT.md: Version bump and audit trail for v1.2.0
  • CHANGELOG.md: Properly categorized changes following semantic versioning
  • README.md: Enhanced documentation with new feature examples and improved installation instructions

The documentation changes are clear, well-organized, and ready to merge.


You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.

@coderabbitai

coderabbitaiBot commented Aug 27, 2026

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

Next included review available in 22 minutes.

View limit details

Limit details: You’ve used the included review currently available. Your 101 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: f4387c00-a6c1-4260-8496-d60aaabf8921

📥 Commits

Reviewing files that changed from the base of the PR and between 93f7c9b and aaad4a1.

📒 Files selected for processing (2)
  • AUDIT.md
  • CHANGELOG.md

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: d8e7b836-2c8c-474b-a1a6-1b1122263477

📥 Commits

Reviewing files that changed from the base of the PR and between a6e3ba3 and 93f7c9b.

📒 Files selected for processing (3)
  • AUDIT.md
  • CHANGELOG.md
  • README.md
💤 Files with no reviewable changes (1)
  • README.md

Included review availability: 0 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 1 review per hour.


📝 Walkthrough

Walkthrough

The release audit now records v1.28.3 validation results and corrected onboarding E2E references. The changelog documents the sync, and obsolete v1.28.3 release-candidate markers were removed from the changelog and README.

Changes

Release Documentation

Layer / File(s)Summary
v1.28.3 release audit
AUDIT.md
The audit records updated release metrics, release-gate results, and the resolved onboarding E2E issue. v1.28.2 details remain as historical context.
Release marker documentation sync
CHANGELOG.md, README.md
The changelog records the v1.28.3 documentation update. Obsolete release-candidate markers were removed while the README release badge remains unchanged.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Merge Risk:⚪ Minimal · up to 93f7c

This PR only synchronizes release documentation and audit records for v1.28.3, with no functional code changes. No actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Title check✅ PassedThe title clearly and concisely describes the post-release documentation sync for v1.28.3 across README, CHANGELOG, and AUDIT.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch post-release-v1283-sync

Comment @coderabbitai help to get the list of available commands.

…IT.md
- 14 release assets, not 15 -- verified directly against the GitHub
Release API rather than a manual recount.
- PR #533 fixed the E2E harness/precondition gap associated with #532,
not #532 itself -- the prior wording implied the root cause was
closed, contradicting the correctly-stated "root cause stays open"
a few words earlier.
- Re-verified 0 open code-scanning alerts directly via the
code-scanning/alerts API rather than inferring it from a green
CodeQL run alone.
@qnbs

qnbs commented Aug 27, 2026

Copy link
Copy Markdown
OwnerAuthor

@coderabbitai review

@coderabbitai

coderabbitaiBot commented Aug 27, 2026

Copy link
Copy Markdown
⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

- Cite PR #530 and PR #533 explicitly next to the issues they fix,
matching AUDIT.md's already-precise wording.
- Make the #532 root-cause-open statement unambiguous: PR #533 fixed
the E2E test-harness symptom, not issue #532 itself -- the prior
parenthetical read ambiguously next to "see issue #532".
@qnbs

qnbs commented Aug 27, 2026

Copy link
Copy Markdown
OwnerAuthor

@coderabbitai review

@coderabbitai

coderabbitaiBot commented Aug 27, 2026

Copy link
Copy Markdown
⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@chatgpt-codex-connectorchatgpt-codex-connectorBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit:0962dc0552

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment threadAUDIT.md Outdated
Comment threadAUDIT.md Outdated
… entry
The release-prep commit only touches src-tauri/, not crates/, so the
changed-path detector correctly gates core-rust off -- it was skipped,
not passed. Verified directly via the run's job list
(conclusion: skipped). The prior wording listed it among jobs that
"passed", overstating the release's validation evidence.
@qnbs

qnbs commented Aug 27, 2026

Copy link
Copy Markdown
OwnerAuthor

@coderabbitai review

@coderabbitai

coderabbitaiBot commented Aug 27, 2026

Copy link
Copy Markdown
⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@chatgpt-codex-connectorchatgpt-codex-connectorBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit:3deb5f2fa8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment threadAUDIT.md Outdated
Comment threadAUDIT.md Outdated
…te entry
- The tag-triggered CI/CD run's PR Size Governance and Deploy to
GitHub Pages jobs are legitimately skipped for a tag push (restricted
to pull_request and refs/heads/main respectively) -- reworded from
"passed all jobs" to "passed all applicable jobs" with the skips
recorded explicitly. Verified via the run's job list.
- Separated the #527 and #532 narratives: #527 was found via v1.28.2's
own tag-run flake, not via #532's E2E harness gap (a distinct, later
finding from PR #530's post-merge main run). The prior wording's
"the E2E test-harness precondition gap that surfaced it in CI" read
as if #532 surfaced #527, conflating two unrelated fixes.
@qnbs

qnbs commented Aug 27, 2026

Copy link
Copy Markdown
OwnerAuthor

@coderabbitai review

@coderabbitai

coderabbitaiBot commented Aug 27, 2026

Copy link
Copy Markdown
⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@codecov

codecovBot commented Aug 27, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@qnbs
qnbs merged commit 3144dbe into mainAug 27, 2026
35 checks passed
@qnbs
qnbs deleted the post-release-v1283-sync branch August 27, 2026 22:26
qnbs added a commit that referenced this pull request Sep 5, 2026
Two corrections from review, verified before fixing:
1. My v1.28.4 AUDIT.md edit replaced the entire v1.28.3 "Release gate"
paragraph instead of inserting the new one above it, deleting real
historical evidence (main CI/CodeQL run IDs, tag-triggered Tauri/
CI/Docker runs, asset list) that a repo-wide search confirmed no
longer appeared anywhere. The v1.28.3 sync itself preserved v1.28.2's
record the same way (PR #535). Restored the v1.28.3 paragraph
unchanged, with v1.28.4's new record inserted above it.
2. TODO.md and AUDIT.md both implied CodeQL SAST reran on the v1.28.4
tag push alongside CI/Tauri/Docker. Verified against
.github/workflows/codeql.yml: it triggers only on
push/branches:[main], with no tags trigger at all -- it never runs
again on a tag push. Corrected both to state the main-push CodeQL
run is the only applicable evidence, distinct from the tag-triggered
CI/Tauri/Docker runs.
qnbs added a commit that referenced this pull request Sep 5, 2026
* docs: post-release v1.28.4 sync (README/CHANGELOG/TODO/AUDIT)
Removed the now-stale release-candidate markers from README.md and
CHANGELOG.md now that the v1.28.4 tag and GitHub Release are published
from main commit 21221d4, and recorded real release-gate evidence in
AUDIT.md:
- Post-merge main CI/CD run 33973305518 and CodeQL run 33973305597,
both green; GitHub Pages deployment 6282574436 verified state:success
for this exact commit.
- Tag-triggered Tauri desktop build 33974750122, CI/CD 33974750136, and
Docker 33974750117 (image digest sha256:f605598f...) all green.
- All 14 expected release assets published (Linux rpm/deb/AppImage,
Windows msi/exe, macOS dmg/app.tar.gz, all with .sig files except the
dmg, plus latest.json), matching the v1.28.3 asset shape.
TODO.md's release-cut item is now marked done, matching the actual
published state.
* fix(docs): preserve v1.28.3 audit history, correct CodeQL tag scope
Two corrections from review, verified before fixing:
1. My v1.28.4 AUDIT.md edit replaced the entire v1.28.3 "Release gate"
paragraph instead of inserting the new one above it, deleting real
historical evidence (main CI/CodeQL run IDs, tag-triggered Tauri/
CI/Docker runs, asset list) that a repo-wide search confirmed no
longer appeared anywhere. The v1.28.3 sync itself preserved v1.28.2's
record the same way (PR #535). Restored the v1.28.3 paragraph
unchanged, with v1.28.4's new record inserted above it.
2. TODO.md and AUDIT.md both implied CodeQL SAST reran on the v1.28.4
tag push alongside CI/Tauri/Docker. Verified against
.github/workflows/codeql.yml: it triggers only on
push/branches:[main], with no tags trigger at all -- it never runs
again on a tag push. Corrected both to state the main-push CodeQL
run is the only applicable evidence, distinct from the tag-triggered
CI/Tauri/Docker runs.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:SThis PR changes 10-29 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@qnbs