buzz/workflows at desktop-v0.5.19 - buzz - Gitea: Git with a cup of tea

jerry/buzz

mirror of https://github.com/block/buzz.git synced 2026-10-27 12:40:30 +00:00

Files

Jordan Mecom ee6ca5fa28 Remove public relay signing key fallback (#6729 )

Require `BUZZ_RELAY_PRIVATE_KEY` on every relay startup and remove the
shared public fallback key completely.

For local development, `just bootstrap` now generates a random key once
in the gitignored `.env` file. Re-running bootstrap preserves that key,
so relay-authored events retain the same identity across restarts. The
local relay recipes reload `.env`, while isolated CI and E2E launchers
pass explicit per-run keys.

Startup fails immediately when the key is missing or invalid, before
connecting to Postgres or Redis. Deployed relays continue to receive
their stable key from the existing chart-managed secret.

Validated with:

- `./scripts/test-ensure-local-relay-key.sh`
- `cargo test -p buzz-relay --bin buzz-relay`
- `cargo clippy -p buzz-relay --bin buzz-relay -- -D warnings`
- `cargo fmt --all -- --check`
- `shellcheck scripts/ensure-local-relay-key.sh
scripts/test-ensure-local-relay-key.sh`

Signed-off-by: Jordan Mecom <jm@squareup.com>

2026-08-25 13:57:23 -07:00

auto-tag-on-release-pr-merge.yml

fix(release): tag immutable desktop candidates (#4811 )

2026-08-05 11:00:14 -07:00

benchmark-harbor.yml

Add Buzz-native collaboration benchmarks (#6264 )

2026-08-20 10:14:39 -04:00

ci.yml

Remove public relay signing key fallback (#6729 )

2026-08-25 13:57:23 -07:00

desktop-release-cache-proof.yml

chore(deps): update ubuntu:24.04 docker digest to 561618e (#5442 )