From 239dcefb8bb4e8c54f79c412f16b212dc0fda7a2 Mon Sep 17 00:00:00 2001 From: Ralf Anton Beier Date: Sat, 8 Aug 2026 08:19:21 +0200 Subject: [PATCH] =?UTF-8?q?ci:=20layer=202026.08.2=20roster=20=E2=80=94=20?= =?UTF-8?q?synth=200.55.0,=20ordeal=200.18.0=20rejoins=20signed?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The audit found 2026.08.1 born stale (synth 0.55.0 predated the deposit) and ordeal shipped its first cosign-signed release same-day in response to ordeal#116 — both fixed in one roster diff. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_019TNtfRjLNhEz82G2ggeeNu --- .github/workflows/deposit-layer.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deposit-layer.yml b/.github/workflows/deposit-layer.yml index 3af589a..279f9d7 100644 --- a/.github/workflows/deposit-layer.yml +++ b/.github/workflows/deposit-layer.yml @@ -29,10 +29,10 @@ env: # : triples; all follow --.tar.gz with # a cosign-signed SHA256SUMS.txt except wsc (raw per-platform binaries). # ordeal is EXCLUDED until its releases carry cosign-signed sums - # (pulseengine/ordeal — Track A gap filed); fail-closed, no TOFU entries. + # ordeal rejoined at v0.18.0 — its first cosign-signed release (ordeal#116). # Entry shape: repo_tool:version[:binary] — binary defaults to the tool # name; kiln ships its CLI as `kilnd`. - TARBALL_TOOLS: "rivet:v0.32.0 synth:v0.54.0 loom:v1.2.0 meld:v0.42.0 spar:v0.35.0 witness:v0.39.0 kiln:v0.4.4:kilnd" + TARBALL_TOOLS: "rivet:v0.32.0 synth:v0.55.0 loom:v1.2.0 meld:v0.42.0 spar:v0.35.0 witness:v0.39.0 ordeal:v0.18.0 kiln:v0.4.4:kilnd" WSC_VERSION: v0.10.0 jobs: