fix: fail release cuts on unavailable tag evidence - #394

Merged

ianhundere merged 16 commits into

mainfrom

fix/release-diagnostics

Sep 28, 2026

Commits on Sep 22, 2026

fix(deps): update module github.com/google/go-github/v89 to v91
renovate[bot]
authored
5943ac6

Commits on Sep 24, 2026

fix(source): require explicitly requested source refs
ianhundere
committed
43393a7
fix(offline): bind VSA inputs to verified bundle results
ianhundere
committed
63177db
fix(offline): include CLI build versions in generated VSAs
ianhundere
committed
690067e
test(predicate): document REST review association compatibility
ianhundere
committed
f948bd9
test(predicate): document REST review association compatibility
ianhundere
committed
a568ce6
fix: clarify trusted-root and untagged policy diagnostics
ianhundere
committed
d37cb8c
fix(release): abort cuts when API tag checks fail
ianhundere
committed
502cdb9
fix(deps): migrate GitHub clients and pointer helpers to v91
ianhundere
committed
6a3cd63
chore(release): deprecate ignored commit identity options
ianhundere
committed
bb229c5
docs: clarify version bumps and legacy VSA metrics
ianhundere
committed
ada6541
test: keep tag fixture compatible with SDK v91
ianhundere
committed
d0a8b67