Skip to content

ci: development as integration branch, CI gate, pre-release channel - #22

Merged
Wikid82 merged 9 commits into
mainfrom
development
Aug 11, 2026
Merged

ci: development as integration branch, CI gate, pre-release channel#22
Wikid82 merged 9 commits into
mainfrom
development

Conversation

@Wikid82

@Wikid82 Wikid82 commented Aug 11, 2026

Copy link
Copy Markdown
Owner

Summary

  • Adds development as the integration branch: feature/dep-update work lands here first, batches, then promotes to main when ready — instead of every merge triggering its own release.
  • Adds ci.yml: build + lint required on PRs into main/development (previously nothing gated merges at all).
  • Branch protection enabled on both main and development: PR + passing CI required, owner can still bypass for hotfixes.
  • Renovate now targets development (baseBranchPatterns) and keeps dependencyDashboardApproval: true — dependency PRs only open when explicitly approved via the Dependency Dashboard, no schedule involved.
  • Adds prerelease.yml: every push to development publishes a pre-release build to the VS Code Marketplace and Open VSX (odd-minor versioning per Marketplace convention, e.g. 1.5.x while stable is 1.4.x) — already live, 1.5.2 is the current pre-release. main stays the verified/stable channel via release-please.
  • Also carries in codeql.yml, pr-title-lint.yml, propagate-main-to-development.yml (auto-opens a draft PR syncing maindevelopment after any hotfix/direct push), and the corrected repository URLs in package.json.

Test plan

  • ci.yml build+lint passing on development (run 31545807980)
  • prerelease.yml published 1.5.1 and 1.5.2 successfully to both registries
  • Confirmed release-please.yml is unchanged from main (an earlier commit on this branch had accidentally deleted it; restored before opening this PR)

Adds CI (build+lint on PRs/pushes) and an automated main->development
sync so hotfixes/direct pushes to main don't leave development stale.
Renovate now targets development instead of main so dependency bumps
batch into a single release instead of triggering one each.
Keeps dependency-update PRs from landing mid-week or over the
weekend; they'll be waiting, green-or-red, when the week starts.
Security patches shouldn't wait up to 6 days for the weekly window.
dependencyDashboardApproval already gates PR creation on manual
checkbox approval, which is the actual behavior wanted — approve
and test when there's time, not wait for a cron window. The schedule
was redundant and would have delayed PR creation past approval.
development is now the beta channel: every push publishes a
pre-release build (odd-minor versioning per VS Code's convention)
that users can opt into via 'Switch to Pre-Release Version', while
main stays the verified/stable track.
release-please.yml was accidentally removed in 83841ab alongside the
obsolete nightly workflows -- it's what cuts stable releases and
publishes to the Marketplace/Open VSX, so it needs to stay on main.

sync-main-to-development.yml duplicated propagate-main-to-development.yml
(same trigger, same job); keeping the latter since it reuses an existing
open PR instead of force-pushing a branch, and labels it.
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@Wikid82
Wikid82 merged commit 0d4b26b into main Aug 11, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants