Skip to content

补充发布失败的安全诊断,保留全部权限与发布守卫 - #4

Merged
Thregren merged 2 commits into
mainfrom
dot/release-diagnostics-20261008
Oct 8, 2026
Merged

Thregren merged 2 commits into
mainfrom
dot/release-diagnostics-20261008

Conversation

@Thregren

@Thregren Thregren commented Oct 8, 2026 •

Copy link
Copy Markdown
Owner

原因

1.14.1全部代码已在PR #3合并,主线24项CI成功。首次受控Release在checkout前只读API返回403,原日志未区分端点与限流/权限原因;没有执行tag或Release写入。

改动

  • 只补错误诊断:端点路径、状态码、四个限流相关响应头、最多300字符的错误message。
  • 隐藏令牌、Bearer值、控制字符,不输出完整headers或正文。
  • checkout前inline逻辑与共享格式函数保持一致并测试。
  • 不更改guard、权限、发布范围,不添加盲重试,不改业务代码。

验证

39项离线guard/脱敏/ZIP确定性测试通过,Node语法、YAML解析与diff检查通过;仍须此PR完整CI成功才能合并。

验证收尾

首轮CI中Firefox的末尾空批次断言失败,其他23项通过。发现测试把reset和显式loadMore分成两次evaluate,存在自动scroll可插入的时序窗口;仅将两者放在同一浏览器任务,保留返回true、空批次及重试按钮断言,并单独覆盖真实scroll事件只加载一次尾批。未修改业务代码,也未把原失败根因当作已实际追踪证实。该修正已独立复核,等待新head a0b914e 的完整CI。

@Thregren
Thregren marked this pull request as ready for review October 8, 2026 05:55
@Thregren
Thregren merged commit 55feedb into main Oct 8, 2026
24 checks passed
@Thregren
Thregren deleted the dot/release-diagnostics-20261008 branch October 8, 2026 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant