ci: add CI/CD, release automation, code quality, and dev tooling#1

Closed

tolgakaratas wants to merge 38 commits intomasterfrom

ci/add-cicd-and-tooling

Commits on May 7, 2026

fix(vsock): unblock guest agent loop after PID 1 fork
tolgakaratas
committed
fix(serial): tee guest output per-byte + replay on attach
tolgakaratas
committed
fix(timer): re-enable kvmclock + tsc-deadline on fresh vCPUs
tolgakaratas
committed
test: add shift-left regression guards for vsock + serial + timer
tolgakaratas
committed
chore: workspace clippy lints, machete hook, shift-left make targets
tolgakaratas
committed
ci: add advisory clippy-strict + coverage workflow
tolgakaratas
committed
fix(block): reject sector overflow in do_read/do_write
tolgakaratas
committed
test: extend unit coverage on bug-class hot paths
tolgakaratas
committed
chore(test): drop unused Write import in virtio block tests
tolgakaratas
committed
feat(net): coexist with Docker by inserting clone rules into DOCKER-USER hook
tolgakaratas
committed
test(e2e): honest TCP probe + login pattern works across distros
tolgakaratas
committed
docs(spec): document Docker-coexistence netfilter strategy + per-VM netns roadmap
tolgakaratas
committed
ci(lint-extra): hard-block curated clippy + per-file coverage ratchet
tolgakaratas
committed
docs(spec): add Miri-runnable parser library to roadmap
tolgakaratas
committed
ci(build): per-job step summaries + aggregator + sticky PR comment
tolgakaratas
committed
ci(lint-extra): per-job step summaries + aggregator + sticky PR comment
tolgakaratas
committed
ci: fix dashboard data — strip ANSI color, use <code> in coverage table
tolgakaratas
committed
ci(lint-extra): bracket-notation for hyphenated job IDs in needs.* refs
tolgakaratas
committed
ci: fix YAML expression parse error + bump actions to current latest
tolgakaratas
committed
ci: pin rustsec/audit-check to Node-24 master HEAD; bump CodeQL to v4
tolgakaratas
committed
ci(dashboard): add base-branch deltas to PR sticky comments
tolgakaratas
committed
ci(dashboard): per-job timing, cache hit, per-binary breakdown, audit IDs, lockfile diff, clippy categories, bottom-10 coverage
tolgakaratas
committed
ci(dashboard): backtick-safe code wrapping + CRLF tolerance in lockdiff
tolgakaratas
committed
ci: add Top-N slowest tests + Mermaid CI flow to dashboard
tolgakaratas
committed
ci: fix nextest output parser for progress-counter token
tolgakaratas
committed
ci: add CODEOWNERS, conventional-commit gate, markdownlint, path labels
tolgakaratas
committed
ci: fix commitlint base-ref fetch (drop invalid --depth=0)
tolgakaratas
committed
ci: relax commitlint length+case to warnings; keep type-enum strict
tolgakaratas
committed
ci: add toolchain row, billing minutes, JUnit, DCO, warnings, fail trace
tolgakaratas
committed
ci: add SBOM (CycloneDX + SPDX) and Sigstore build provenance
tolgakaratas
committed
ci: add aarch64-musl advisory build to catch cross-build breakage
tolgakaratas
committed
ci: drop aarch64 target until cross-arch refactor lands
tolgakaratas
committed
ci: package x86_64 binary as distroless container, push on master
tolgakaratas
committed