chore(release): bump version to v1.28.7 - #803
Conversation
Advance the verified post-v1.28.6 main line into the v1.28.7 release candidate so the desktop artifacts can be qualified while maintainer capacity and user adoption make release timing material. Synchronize package.json, the Tauri manifests and lockfile, the service-worker cache version, and the release-truth documents. Move the current Unreleased notes under the dated v1.28.7 heading and retain the release-candidate markers until the signed tag exists. This cut uses the explicit one-time exception recorded in issue #743: incomplete AI/local-AI qualification remains open and is not represented as PASS. No tag, GitHub Release, desktop asset, updater manifest, publication, #743 closure, #553 completion, or native-authority claim is made here. Validation: signing doctor; docs:check; Tauri plugin parity; native-readiness check; prospective PR budget; version coherence; diff checks; PR_BUDGET_BASE=origin/main pnpm run ci:prepush.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Understand this PR’s impact Explore downstream dependencies and potential security impact with Blast Radius. No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository: qnbs/WorldScript-Studio/.coderabbit.yaml Review profile: CHILL Plan: Essentials Run ID: 📒 Files selected for processing (1)
🚧 Files skipped from review as they are similar to previous changes (1)
Included review availability: 2 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 4 reviews per hour. 📝 WalkthroughWalkthroughThe project version changes from 1.28.6 to 1.28.7. Service-worker cache names use the new version. Release documentation identifies v1.28.7 as a pre-tag release candidate with qualification and publication gates still open. Changesv1.28.7 release candidate
Priority: ⬇️ Low Comment |
Reviewer's GuideThis draft reserves the v1.28.7 release-cut candidate by synchronizing version metadata across web, service-worker, and Tauri packaging surfaces, while updating release documentation to clearly identify the pre-tag state, the one-time AI qualification exception, and the gates that must still pass before publication. Flow diagram for v1.28.7 release-candidate gatesflowchart TD
Candidate[Prepare v1.28.7 release candidate]
Sync[Synchronize version and release truth]
Gates[Pass CI, CodeQL, security, parity, and desktop qualification gates]
Merge[Merge release PR]
Publish[Create tag, GitHub Release, and artifacts]
Exception[AI/local-AI qualification exception\n#743 remains open]
Candidate --> Sync
Sync --> Exception
Exception --> Gates
Gates --> Merge
Merge --> Publish
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
🏁 CodeAnt Quality Gate ResultsCommit: ✅ Overall Status: PASSEDQuality Gate Details
|
![codescene-access[bot]](https://avatars.githubusercontent.com/in/3755875?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
[check-pr-size] PR size is over the target tier (normal profile): 9 files, 37 meaningful lines, 3 commits — limit ≤8 files / ≤400 lines / ≤6 commits. Consider splitting into smaller, independently reviewable PRs. |
Record the assigned PR number in the fresh Unreleased release-candidate note so the governed CHANGELOG reference guard can validate the draft release PR. This metadata-only correction preserves the explicit #743 qualification exception truth: the AI/local-AI gate remains open and is not claimed as PASS. No product behavior or release scope changed. Validation: PR_BUDGET_BASE=origin/main pnpm run ci:prepush (PASS).
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
qnbs
changed the title
|
Skipping CodeAnt AI review — this PR is a back-merge between long-lived branches ( If you want to analyze this anyway (e.g. you resolved conflicts with new logic), comment |
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 2
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: qnbs/WorldScript-Studio/.coderabbit.yaml
Review profile: CHILL
Plan: Essentials
Run ID: 01f55a3f-bcb5-4907-a49e-66f41da2b4be
⛔ Files ignored due to path filters (1)
src-tauri/Cargo.lockis excluded by!**/*.lock
📒 Files selected for processing (8)
AUDIT.mdCHANGELOG.mdREADME.mdTODO.mdpackage.jsonpublic/sw.jssrc-tauri/Cargo.tomlsrc-tauri/tauri.conf.json
Included review availability: 3 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 4 reviews per hour.
The release workflow extracts notes from the dated version heading, but the initial candidate description was still under [Unreleased] and would have been omitted from the generated release notes. Keep [Unreleased] limited to the assigned PR reference and place the exception-aware v1.28.7 candidate description under the dated release heading. No runtime, dependency, signing, tag, publication, or #743 qualification claim changes. Validation: - pnpm run docs:check - pnpm run pr:budget -- --base origin/main --prospective - pnpm run ci:prepush
There was a problem hiding this comment.
Gates Passed
See analysis details in CodeScene
Quality Gate Profile: The Bare Minimum
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.
1 participant
Purpose
Prepare the v1.28.7 release cut from the qualified post-#802 main. The maintainer explicitly authorized this exceptional early release because the desktop distribution is receiving real use and release timing has material user impact.
This PR is limited to release metadata and version synchronization. It contains no product-runtime or feature implementation change.
Release preparation
1.28.7acrosspackage.json,src-tauri/tauri.conf.json,src-tauri/Cargo.toml,src-tauri/Cargo.lock, andpublic/sw.js.## [1.28.7] — 2026-09-21and retain a fresh[Unreleased]section with the required PR reference.TODO.mdandAUDIT.md.Qualification truth
a6397a97a64ad392be851b54400778211ef63dfe.35583432679and CodeQL run35583432354passed.Explicitly not claimed
This PR does not create or push a tag, create a GitHub Release, publish packages or desktop assets, generate updater metadata, or claim pre-tag desktop qualification. Intel macOS is not claimed. It does not close #743, #711, #714, or #556; complete #553; remove the existing Tauri/IndexedDB fallback; switch Rust Core or Qt authority; or implement external filesystem CAS/lock semantics.
Validation
fc423075797f0d63bdd410e156ee8b118bbd7b1band signed CHANGELOG bootstrap correction73f7fac42460c890a13a1d261a744b497fcc85e6.git diff --checkpassed.pnpm run signing:doctorpassed with the configured signing agent.pnpm run docs:checkpassed.pnpm run tauri-plugins:checkpassed.pnpm run native-readiness:checkpassed.PR_BUDGET_BASE=origin/main pnpm run ci:prepushpassed for the release candidate and the CHANGELOG-only bootstrap correction.35590105632passed, including Node 22/24, Tauri Rust, Build, Deep E2E, Playwright E2E, Storybook, Browser Quality/VRT/Lighthouse, security, governance, signatures, CodeQL, CodeFactor, CodeScene, CodeAnt, Semgrep, Vercel, and the PR CHANGELOG reference guard.No tag or GitHub Release exists yet; pre-tag Tauri qualification remains a separate required step after this PR merges.
Summary by Sourcery
Prepare the v1.28.7 release candidate by synchronizing version metadata and documenting its pre-tag qualification status.
Enhancements:
Documentation:
Summary by CodeRabbit
Release
Documentation
Bug Fixes