* added cherry-pick workflow
* removed hotfix-rc branch from dest_branch options and added the standard hotfix branches
* added cherry-pick workflow to codeowners and set ownership to team-platform-dev
* Add new workflow.
* Workflow lints
* More security fixes.
* Claude feedback.
* Don't make empty commit.
* Update job name.
* Updated node version check.
* Print environments.
* Addressed PR feedback.
* Removed concept of distingushing downgrade.
* Updated to reference specific run_id if triggered by one.
* Addressed Claude feedback.
* add release channel for snap, defaulted to stable, add download for arm64 variant, add upload for arm, make channel a variable we can pass
* temporarily comment out amd publish to resolve duplicate rejection error
* restore branch check, uncomment amd64 line
* fix: add support for overriding commercial SDK
* fix: only download commercial when needed
* fix: only download OSS SDK for OSS builds and commercial SDK for commercial builds
Previously, the OSS sdk-internal was downloaded and linked for all
build types including commercial, which is wasteful. Now each build
type only downloads the SDK artifact it needs.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* revert: changes to build-desktop.yml
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
* [deps]: Update Minor github-actions updates
* Revert bump of create-github-app-token for test-browser-interactions.yml
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>
* Fix file list
* Add ddg-alert-files-list branch to test PR triggers
* Update branches for pull request trigger
Restrict pull request monitoring to the main branch only.
* [deps]: Update Minor github-actions updates
* Revert update of actions/create-github-app-token in test-browser-interactions.yml
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>
Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
* [deps]: Update Minor github-actions updates
* Revert bump
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
* Update repository-management workflow for RC branch rulesets
Add GPG signing and PR-based workflow to comply with upcoming RC branch
protection rules. Version bumps now create PRs with signed commits instead
of pushing directly to branches.
* Fix linter issues in workflow
Use environment variables for GPG secrets to prevent template injection.
Update github-script to v8.0.0 to match other workflows in repo.
* Add CI validations install and run Desktop client (Linux)
* add support for arm for snap and flatpak
* fix flatpak pkg doesn't match installed name
* name change
* remove unused dep
* add other validations to check-failures
* add wayland validation
* wayland deps
* simulate X server
* remove unused id
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
Commit a3e654d (https://github.com/bitwarden/clients/pull/16053) removed explicit --target flags from the Linux desktop build workflow when removing musl support. This change inadvertently broke the build.js binary distribution logic, which only copies the desktop_proxy binary to the dist directory when an explicit target is specified. Without this binary in the expected location (/opt/Bitwarden/desktop_proxy), browser integration fails on Linux.
This fix restores explicit --target flags using gnu triplets instead of the previously removed musl triplets. The x64 build now uses --target=x86_64-unknown-linux-gnu and the arm64 build uses --target=aarch64-unknown-linux-gnu, ensuring build.js properly distributes the desktop_proxy binary and restoring browser integration functionality on Linux desktop.
