Hongming Wang 33eb629c16 ci(promote-latest): workflow_dispatch to retag :staging-<sha> → :latest ... Escape hatch for the initial rollout window (canary fleet not yet provisioned, so canary-verify.yml's automatic promotion doesn't fire) AND for manual rollback scenarios. Uses the default GITHUB_TOKEN which carries write:packages on repo- owned GHCR images, so no new secrets are needed. crane handles the remote retag without pulling or pushing layers. Validates the src tag exists before retagging + verifies the :latest digest post-retag so a typo can't silently promote the wrong image. Trigger from Actions → promote-latest → Run workflow → enter the short sha (e.g. "4c1d56e"). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-19 05:42:48 -07:00
..
canary-verify.yml	feat(canary): gate :latest tag promotion on canary verify green (Phase 3)	2026-04-19 03:33:04 -07:00
ci.yml	ci: update GitHub Actions to current stable versions (closes #780)	2026-04-18 12:04:10 -07:00
e2e-api.yml	fix(ci): update working-directory for workspace-server/ and workspace/ renames	2026-04-18 07:05:44 -07:00
promote-latest.yml	ci(promote-latest): workflow_dispatch to retag :staging-<sha> → :latest	2026-04-19 05:42:48 -07:00
publish-canvas-image.yml	ci: update GitHub Actions to current stable versions (closes #780)	2026-04-18 12:04:10 -07:00
publish-workspace-server-image.yml	fix(ci): clone sibling plugin repo so publish-workspace-server-image builds	2026-04-19 05:19:31 -07:00