Visitar URL original
v0.9.37: workspace files paging and search, token sealing by default, scim hardening, db indexes by waleedlatif1 · Pull Request #9426 · simstudioai/sim · GitHub
Skip to content

v0.9.37: workspace files paging and search, token sealing by default, scim hardening, db indexes #9426

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
waleedlatif1 merged 21 commits into from
Oct 29, 2026
Merged

v0.9.37: workspace files paging and search, token sealing by default, scim hardening, db indexes #9426

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
02197b5
docs(cli): add agent skills setup to the CLI overview (#9417)
waleedlatif1 Oct 28, 2026
8563d25
fix(ci): predict the promoted app digest instead of trusting a read r…
waleedlatif1 Oct 28, 2026
fb74b4b
fix(billing): withhold the free allowance from Gmail aliases of an ex…
waleedlatif1 Oct 28, 2026
7f72c6d
fix(desktop): hold the GitHub credential check open while the e2e ass…
waleedlatif1 Oct 28, 2026
80be6e3
chore(deps): dependency hygiene cleanup (#9422)
waleedlatif1 Oct 28, 2026
54bb500
chore(deps): replace deprecated OpenTelemetry trace SDK packages with…
waleedlatif1 Oct 28, 2026
5b49429
fix(library): merge duplicate sections and FAQs in the ecommerce and …
waleedlatif1 Oct 28, 2026
94de080
chore(ci): authenticate Trigger.dev deploys with per-environment API …
waleedlatif1 Oct 28, 2026
f2401ac
perf(db): cut hot-path database work and close copilot cleanup gaps (…
waleedlatif1 Oct 28, 2026
17f35ef
feat(db): seal account tokens by default and backfill them during mig…
waleedlatif1 Oct 29, 2026
e05cf89
fix(files): cap how long a room delivery waits for its refetches (#9427)
waleedlatif1 Oct 29, 2026
a34e2e7
fix(ci): fail the promote wait on a digest lookup error instead of re…
waleedlatif1 Oct 29, 2026
336ed5a
chore(deps): drop the stray bun tag hunk from the zod patch (#9432)
waleedlatif1 Oct 29, 2026
77dfe17
fix(billing): serialize Gmail inbox allowance decisions so racing ali…
waleedlatif1 Oct 29, 2026
31f7529
fix(scim): harden directory lifecycle and clarify group mappings (#9429)
waleedlatif1 Oct 29, 2026
70724d0
perf(db): index a workspace's live files in upload order (#9434)
waleedlatif1 Oct 29, 2026
19b8d53
fix(cleanup): keep shared chat files, sweep inline images by prefix, …
waleedlatif1 Oct 29, 2026
fffa150
feat(files): page, search, look up and roll up workspace files over t…
waleedlatif1 Oct 29, 2026
70c8231
perf(files): page the Files browser and resolve files without listing…
waleedlatif1 Oct 29, 2026
59bbfd5
perf(audit-logs): index organization-level rows and read them as two …
waleedlatif1 Oct 29, 2026
8a14967
fix(audit-logs): list an organization's audit log through its single …
waleedlatif1 Oct 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix(ci): predict the promoted app digest instead of trusting a read r… 
…ight after the retag (#9416)

* fix(ci): predict the promoted app digest instead of trusting a read right after the retag

* fix(ci): bound the promoted-tag wait by elapsed time and each ECR read by a timeout
  • Loading branch information
@waleedlatif1
waleedlatif1 authored Oct 28, 2026
commit 8563d2582edb058f3453668fe1edfc07824edf2f
2 changes: 1 addition & 1 deletion .github/scripts/get-ecr-image-digest.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ if [ -n "$ALLOW_MISSING" ] && [ "$ALLOW_MISSING" != '--allow-missing' ]; then
exit 1
fi
export AWS_PAGER=''
aws ecr batch-get-image --repository-name "$REPOSITORY" --image-ids imageTag="$TAG" --output json |
aws --cli-connect-timeout 10 --cli-read-timeout 20 ecr batch-get-image --repository-name "$REPOSITORY" --image-ids imageTag="$TAG" --output json |
ALLOW_MISSING="$ALLOW_MISSING" python3 -c '
import json, os, re, sys
response = json.load(sys.stdin)
Expand Down
15 changes: 14 additions & 1 deletion .github/scripts/promote-app-image.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,22 @@ RELEASE_TAG="${5:-}"
: "${GITHUB_OUTPUT:?GitHub output file required}"
SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
PREVIOUS=$(bash "$SCRIPT_DIR/get-ecr-image-digest.sh" "$REPOSITORY" "$DEPLOY_TAG" --allow-missing)
# A tag read straight after the move can still return the previous image, which
# reports a moved tag as unchanged. The dry run prints the exact manifest the
# move pushes (plus a trailing newline), so its hash is the digest the tag will
# point at, known before the move.
MANIFEST=$(docker buildx imagetools create --dry-run -t "$REGISTRY/$REPOSITORY:$DEPLOY_TAG" "$REGISTRY/$REPOSITORY:$SOURCE_TAG")
DIGEST="sha256:$(printf '%s' "$MANIFEST" | sha256sum | cut -d' ' -f1)"
EPOCH=$(date +%s)
bash "$SCRIPT_DIR/promote-image.sh" "$REGISTRY" "$REPOSITORY" "$SOURCE_TAG" "$DEPLOY_TAG" "$RELEASE_TAG"
DIGEST=$(bash "$SCRIPT_DIR/get-ecr-image-digest.sh" "$REPOSITORY" "$DEPLOY_TAG")
deadline=$(( $(date +%s) + 60 ))
until [ "$(bash "$SCRIPT_DIR/get-ecr-image-digest.sh" "$REPOSITORY" "$DEPLOY_TAG" --allow-missing)" = "$DIGEST" ]; do
if [ "$(date +%s)" -ge "$deadline" ]; then
echo "ERROR: $DEPLOY_TAG did not resolve to the pushed $DIGEST within 60s; cutover cannot be correlated" >&2
exit 1
fi
sleep 3
done
Comment thread
waleedlatif1 marked this conversation as resolved.
Resolved
CHANGED=true
if [ "$DIGEST" = "$PREVIOUS" ]; then CHANGED=false; fi
{
Expand Down
Loading