next.js
[cd] Gate release bot credentials behind GitHub environments
#100121
Merged

[cd] Gate release bot credentials behind GitHub environments #100121

eps1lon merged 17 commits into canary from sebbie/npm-4-eye-review
eps1lon
github-actions
github-actions github-actions added created-by: Next.js team
github-actions github-actions added Font (next/font)
vercel
vercel commented on 2026-10-13
vercel-internal-security-reviewer
eps1lon eps1lon force pushed from 93398071 to 78dcc966 21 days ago
eps1lon eps1lon force pushed from 78dcc966 to 130f013c 21 days ago
eps1lon
eps1lon commented on 2026-10-13
eps1lon eps1lon marked this pull request as ready for review 21 days ago
eps1lon eps1lon requested a review 20 days ago
icyJoseph
icyJoseph approved these changes on 2026-10-15
eps1lon [cd] Gate release bot credentials behind GitHub environments
7a9d2a40
eps1lon [cd] Reintroduce minimal create_release_branch workflow
a47092d5
eps1lon [cd] Enforce release tags in create_release_branch; doc bot-only crea…
269f555e
eps1lon [cd] Doc: preview publishes require approval, canary stays autonomous
353b5f64
eps1lon [cd] All prerelease channels trigger autonomously; bot-autonomous all…
b1370e56
eps1lon [cd] Doc: approvals come from the Next.js Engineering team
17e2324c
eps1lon [cd] Keep bot token for un-drafting releases in publishRelease
962cdd25
eps1lon [ci] Fix script injection in update_react dispatch input
c2181131
eps1lon [ci] Don't gate release workflows on repository owner
d3b7f0d3
eps1lon [ci] Harden tag validation in create_release_branch
4f70213f
eps1lon [ci] Drop noise comments from workflow edits
d7fa6661
eps1lon [ci] Revert permissions/clone changes in trigger_release; drop comment
b1c8d3b8
eps1lon [ci] Drop retired next-* branches from CI push filters
cb0a4112
eps1lon [ci] Drop retired next-* branches from staging condition
761bdd78
eps1lon [cd] Doc: revived branches need the environment migration backported
80e8c729
eps1lon [cd] Doc: reference the environment migration PR in the revive guide
55563481
eps1lon [ci] Treat all releases/** branches as staging deploy target
378b57bc
eps1lon eps1lon force pushed from 3e4ac797 to 378b57bc 14 days ago
eps1lon eps1lon enabled auto-merge (squash) 14 days ago
eps1lon eps1lon merged 354b77de into canary 14 days ago
eps1lon eps1lon deleted the sebbie/npm-4-eye-review branch 14 days ago
github-actions github-actions added locked
github-actions github-actions locked as resolved and limited conversation to collaborators 15 hours ago

Login to write a write a comment.

Login via GitHub

Reviewers
Assignees
No one assigned
Labels
Milestone