Skip to content

Release/1.0.3 (#527)#529

Merged
colinmxs merged 1 commit into
developfrom
main
Jun 30, 2026
Merged

Release/1.0.3 (#527)#529
colinmxs merged 1 commit into
developfrom
main

Conversation

@colinmxs

Copy link
Copy Markdown
Contributor

Patch release 1.0.3 — maintenance only, no application code or user-facing
behavior changes. Operators on 1.0.x upgrade in place (no migration).

CI/CD (#524, #525):

  • Serialize platform.yml + backend.yml under one repo-global concurrency group (deploy-) so a CFN deploy and the API-driven backend code deploys can't run concurrently and stomp the same ECS service / AgentCore Runtime / Lambda. Frontend stays independent.
  • Re-enable push-triggered, path-scoped deploys for platform/backend/frontend (develop → dev env, main → prod), after being workflow_dispatch-only since v1.0.0.
  • Extract duplicated test gates into a reusable tests.yml; fix skipped single-suite job labels rendering raw ${{ }} expressions.
  • Prune dead nightly tracks + orphaned scripts; docs-deploy now publishes from main; fork-gate docs-deploy and release.

Security & deps (#526):

Also bumps VERSION/manifests/lockfiles to 1.0.3, adds brief RELEASE_NOTES.md
and CHANGELOG.md entries, and updates the release-notes steering doc to scale
write-up depth to release size (brief patches, deep feature releases).

Patch release 1.0.3 — maintenance only, no application code or user-facing
  behavior changes. Operators on 1.0.x upgrade in place (no migration).

  CI/CD (#524, #525):
  - Serialize platform.yml + backend.yml under one repo-global concurrency
    group (deploy-<ref>) so a CFN deploy and the API-driven backend code
    deploys can't run concurrently and stomp the same ECS service /
    AgentCore Runtime / Lambda. Frontend stays independent.
  - Re-enable push-triggered, path-scoped deploys for platform/backend/frontend
    (develop → dev env, main → prod), after being workflow_dispatch-only since v1.0.0.
  - Extract duplicated test gates into a reusable tests.yml; fix skipped
    single-suite job labels rendering raw ${{ }} expressions.
  - Prune dead nightly tracks + orphaned scripts; docs-deploy now publishes
    from main; fork-gate docs-deploy and release.

  Security & deps (#526):
  - joserfc 1.6.3 → 1.7.2 (GHSA-wphv-vfrh-23q5 / CVE-2026-48990).
  - Remove unused imports flagged by CodeQL (Optional, ssm).

  Also bumps VERSION/manifests/lockfiles to 1.0.3, adds brief RELEASE_NOTES.md
  and CHANGELOG.md entries, and updates the release-notes steering doc to scale
  write-up depth to release size (brief patches, deep feature releases).
@colinmxs colinmxs merged commit 0b680b3 into develop Jun 30, 2026
37 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant