Skip to content

docs: post-release v1.28.4 sync (README/CHANGELOG/TODO/AUDIT) - #616

Merged
qnbs merged 2 commits into
mainfrom
docs/post-release-v1.28.4-sync
Sep 5, 2026
Merged

docs: post-release v1.28.4 sync (README/CHANGELOG/TODO/AUDIT)#616
qnbs merged 2 commits into
mainfrom
docs/post-release-v1.28.4-sync

Conversation

@qnbs

@qnbsqnbs commented Sep 5, 2026

Copy link
Copy Markdown
Owner

User description

Summary

Post-release truth sync for v1.28.4, now that the tag and GitHub Release are actually published from main commit 21221d43. Matches the established v1.28.2/v1.28.3 pattern (PR #528, #535).

Changes

  • Removed the <!-- release-candidate: v1.28.4 --> markers from README.md and CHANGELOG.md — the version badge and dated CHANGELOG entry are now unconditionally truthful since the tag exists.
  • AUDIT.md updated with real, verified release-gate evidence:
    • Post-merge main CI/CD run 33973305518 and CodeQL run 33973305597, both green.
    • GitHub Pages deployment 6282574436 verified state: success for commit 21221d43.
    • Tag-triggered Tauri desktop build (33974750122), CI / CD (33974750136), and Docker (33974750117, image digest sha256:f605598f...) all green.
    • All 14 expected release assets published (Linux rpm/deb/AppImage, Windows msi/exe, macOS dmg/app.tar.gz, .sig files, latest.json), matching the v1.28.3 asset shape.
  • TODO.md's release-cut item flipped from in-progress to done.

Validation

  • node scripts/check-doc-metrics.mjs — OK, latest v1.28.4.
  • pnpm run lint — clean.

Summary by Sourcery

Finalize the documentation and release tracking for the published v1.28.4 release.

Enhancements:

  • Synchronize repository documentation with the published v1.28.4 release and record its verified release, deployment, build, security, and asset evidence.

Documentation:

  • Remove stale v1.28.4 release-candidate markers and add a post-release changelog entry.

Chores:

  • Mark the v1.28.4 release-cut task as complete.

CodeAnt-AI Description

Align release documentation with the published v1.28.4 release

What Changed

  • Release documentation now identifies v1.28.4 as published, including verified CI, deployment, desktop build, Docker, and release-asset evidence
  • README and CHANGELOG no longer show v1.28.4 as a release candidate
  • The TODO release-cut item is marked complete

Impact

✅ Accurate v1.28.4 release status
✅ Verifiable release and deployment evidence
✅ Clearer release-readiness tracking

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.


Summary by cubic

Syncs the release docs to the published v1.28.4 tag and GitHub Release, replacing the pending release-candidate state with verified evidence.

  • Removes the release-candidate markers from README.md and CHANGELOG.md and adds a changelog entry for the sync.
  • Records release-gate evidence in AUDIT.md: main CI/CD, CodeQL, GitHub Pages deploy, tag-triggered Tauri/CI/Docker runs, and published release assets.
  • Marks the v1.28.4 release-cut item as done in TODO.md.
  • Restores the v1.28.3 release-gate record in AUDIT.md that the initial edit had overwritten.
  • Corrects TODO.md and AUDIT.md to state that CodeQL runs only on main pushes, not tag pushes.

Written for commit a9cd179. Summary will update on new commits.

Review in cubic

Summary by CodeRabbit

  • Documentation

    • Updated release records and changelog entries for v1.28.4.
    • Added release verification details, including CI/CD, security checks, deployment validation, and published artifacts.
    • Removed outdated release-candidate markers while retaining the v1.28.4 release badge.
  • Chores

    • Updated project tracking to reflect that v1.28.4 has been released, including published tags, release assets, and completed verification checks.

Removed the now-stale release-candidate markers from README.md and
CHANGELOG.md now that the v1.28.4 tag and GitHub Release are published
from main commit 21221d4, and recorded real release-gate evidence in
AUDIT.md:
- Post-merge main CI/CD run 33973305518 and CodeQL run 33973305597,
both green; GitHub Pages deployment 6282574436 verified state:success
for this exact commit.
- Tag-triggered Tauri desktop build 33974750122, CI/CD 33974750136, and
Docker 33974750117 (image digest sha256:f605598f...) all green.
- All 14 expected release assets published (Linux rpm/deb/AppImage,
Windows msi/exe, macOS dmg/app.tar.gz, all with .sig files except the
dmg, plus latest.json), matching the v1.28.3 asset shape.
TODO.md's release-cut item is now marked done, matching the actual
published state.
@codeant-ai

codeant-aiBot commented Sep 5, 2026

Copy link
Copy Markdown

🤖 CodeAnt AI — Review Status

StatusCommitStarted (UTC)Finished (UTC)
✅ Reviewed your PR4ad0accSep 05, 2026 · 15:5615:58

@codeant-ai

codeant-aiBot commented Sep 5, 2026

Copy link
Copy Markdown

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

@vercel

vercelBot commented Sep 5, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated
worldscript-studioReadyReadyPreviewSep 5, 2026 4:13pm UTC

@sourcery-aisourcery-aiBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry @qnbs, you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 2 days and 22 hours by commenting @sourcery-ai review. Upgrade to get a review now.

@sourcery-ai

Copy link
Copy Markdown
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This post-release documentation sync makes v1.28.4 status unconditionally truthful across the README, changelog, TODO, and audit record, using verified CI/CD, deployment, container, and release-asset evidence from commit 21221d4. Validation reported by the PR is clean documentation metrics and lint.

Flow diagram for v1.28.4 release-truth synchronization

flowchart LR
Commit["Validated main commit 21221d43"] --> Gates["Verified release gates"]
Gates --> Evidence["CI/CD, CodeQL, Pages, Tauri, Docker green"]
Evidence --> Assets["14 release assets published"]
Assets --> Docs["README, CHANGELOG, TODO, AUDIT synchronized"]
Docs --> Truth["v1.28.4 status unconditionally truthful"]
Loading

File-Level Changes

ChangeDetailsFiles
Reconciles release documentation with the published v1.28.4 tag and GitHub Release.
  • Removes stale release-candidate markers and records the post-release sync in the changelog.
  • Updates the README release badge state.
  • Marks the v1.28.4 release-cut task complete.
README.md
CHANGELOG.md
TODO.md
Replaces planned release-gate statements with verified v1.28.4 release evidence.
  • Records green main CI/CD and CodeQL runs, including successful GitHub Pages deployment verification.
  • Records successful tag-triggered Tauri, CI/CD, and Docker workflows plus the Docker image digest.
  • Documents the complete 14-asset release shape and platform-signing caveats.
  • Updates the current-version metadata, release commit, release date, merged changes, and test/locale counts.
AUDIT.md

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@deepsource-io

deepsource-ioBot commented Sep 5, 2026

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 21221d4...a9cd179 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall GradeSecurity

Reliability

Complexity

Hygiene

Code Review Summary

AnalyzerStatusUpdated (UTC)Details
DockerSep 5, 2026 4:13p.m.Review ↗
PythonSep 5, 2026 4:13p.m.Review ↗
RustSep 5, 2026 4:13p.m.Review ↗
ShellSep 5, 2026 4:13p.m.Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@codeant-aicodeant-aiBot added the size:S This PR changes 10-29 lines, ignoring generated files label Sep 5, 2026
codescene-access[bot]

This comment was marked as outdated.

@codeant-ai

codeant-aiBot commented Sep 5, 2026

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit:a9cd179a
Scan Time: 2026-09-05 16:13:35 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality GateStatusDetails
Secrets✅ PASSED0 secrets found
Duplicate Code✅ PASSED0.0% duplicated
SAST✅ PASSEDNo security issues
Bugs✅ PASSEDRating S: No bugs
IAC✅ PASSEDNo IAC issues

View Full Results

@amazon-q-developeramazon-q-developerBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR correctly removes stale release-candidate markers and documents the v1.28.4 release completion across AUDIT.md, CHANGELOG.md, and README.md. All changes are documentation-only, follow the documented truth-sync process, and maintain consistency across files. The changes are working as intended - no defects found that would block merge.


You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.

@coderabbitai

coderabbitaiBot commented Sep 5, 2026

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

Next included review available in 43 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 83 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Essentials

Run ID: 6ab8d27f-5b95-4def-a662-3f4fc79fc35d

📥 Commits

Reviewing files that changed from the base of the PR and between 4ad0acc and a9cd179.

📒 Files selected for processing (2)
  • AUDIT.md
  • TODO.md

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Essentials

Run ID: b83cba82-bb2d-490f-8cca-12197df31198

📥 Commits

Reviewing files that changed from the base of the PR and between 21221d4 and 4ad0acc.

📒 Files selected for processing (4)
  • AUDIT.md
  • CHANGELOG.md
  • README.md
  • TODO.md
💤 Files with no reviewable changes (1)
  • README.md

Included review availability: 0 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 1 review per hour.


📝 Walkthrough

Walkthrough

The release documentation now reflects v1.28.4. Audit evidence, changelog status, README release markers, and sprint tracking were updated.

Changes

v1.28.4 Release Documentation

Layer / File(s)Summary
Release evidence record
AUDIT.md
Records v1.28.4 fixes, design updates, test and localization metrics, CI/CD results, CodeQL status, Docker digest, deployment verification, release assets, and platform qualification.
Release status reconciliation
CHANGELOG.md, README.md, TODO.md
Removes stale release-candidate markers and records the completed v1.28.4 release, published artifacts, validation results, and updated audit evidence.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk:⚪ Minimal · up to 4ad0a

This documentation-only update reconciles the published v1.28.4 release records with no remaining merge-readiness risk.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Title check✅ PassedThe title clearly and concisely describes the post-release v1.28.4 documentation synchronization across README.md, CHANGELOG.md, TODO.md, and AUDIT.md.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch docs/post-release-v1.28.4-sync

Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connectorchatgpt-codex-connectorBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit:4ad0acc54c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment threadAUDIT.md Outdated
Comment threadTODO.md Outdated
@codecov

codecovBot commented Sep 5, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

Two corrections from review, verified before fixing:
1. My v1.28.4 AUDIT.md edit replaced the entire v1.28.3 "Release gate"
paragraph instead of inserting the new one above it, deleting real
historical evidence (main CI/CodeQL run IDs, tag-triggered Tauri/
CI/Docker runs, asset list) that a repo-wide search confirmed no
longer appeared anywhere. The v1.28.3 sync itself preserved v1.28.2's
record the same way (PR #535). Restored the v1.28.3 paragraph
unchanged, with v1.28.4's new record inserted above it.
2. TODO.md and AUDIT.md both implied CodeQL SAST reran on the v1.28.4
tag push alongside CI/Tauri/Docker. Verified against
.github/workflows/codeql.yml: it triggers only on
push/branches:[main], with no tags trigger at all -- it never runs
again on a tag push. Corrected both to state the main-push CodeQL
run is the only applicable evidence, distinct from the tag-triggered
CI/Tauri/Docker runs.

@codescene-accesscodescene-accessBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No application code in the PR — skipped Code Health checks.

See analysis details in CodeScene

Quality Gate Profile:The Bare Minimum
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.

@qnbs
qnbs merged commit f490360 into mainSep 5, 2026
40 checks passed
@qnbs
qnbs deleted the docs/post-release-v1.28.4-sync branch September 5, 2026 16:40
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:SThis PR changes 10-29 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@qnbs