From e9e6ce8a4d7807017a9c86092c573ad187c3ee8f Mon Sep 17 00:00:00 2001 From: yoshi49535 Date: Mon, 14 Sep 2026 00:53:50 +0900 Subject: [PATCH 1/2] test(e2e): the provider image carries federation-oidc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit auth.provider added `@o3co/auth-provider-federation-oidc` this cycle, and its standalone template depends on it. The e2e provider Dockerfile lists each package by hand in three places (deps install, runtime package.json, dist), and did not follow, so the image failed at `pnpm install` with ERR_PNPM_WORKSPACE_PKG_NOT_FOUND — the same miss #432's device-grant had. With the three lines added, `make test-e2e` passes against auth.provider develop a82a76be and auth.policy-verifier develop 3291ea98 (token-flow 20/20, abac 19/19). The pins themselves move in the release cut. Co-Authored-By: Claude Opus 5 (1M context) --- tests/dockerfiles/provider.Dockerfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/tests/dockerfiles/provider.Dockerfile b/tests/dockerfiles/provider.Dockerfile index 9b8597b..dd47fc2 100644 --- a/tests/dockerfiles/provider.Dockerfile +++ b/tests/dockerfiles/provider.Dockerfile @@ -27,6 +27,7 @@ COPY packages/dpop/package.json packages/dpop/package.json COPY packages/federation-apple/package.json packages/federation-apple/package.json COPY packages/federation-github/package.json packages/federation-github/package.json COPY packages/federation-google/package.json packages/federation-google/package.json +COPY packages/federation-oidc/package.json packages/federation-oidc/package.json COPY packages/foundation/package.json packages/foundation/package.json COPY packages/mtls/package.json packages/mtls/package.json COPY packages/oauth/package.json packages/oauth/package.json @@ -61,6 +62,7 @@ COPY --from=deps /home/node/packages/dpop/package.json packages/dpop/package.jso COPY --from=deps /home/node/packages/federation-apple/package.json packages/federation-apple/package.json COPY --from=deps /home/node/packages/federation-github/package.json packages/federation-github/package.json COPY --from=deps /home/node/packages/federation-google/package.json packages/federation-google/package.json +COPY --from=deps /home/node/packages/federation-oidc/package.json packages/federation-oidc/package.json COPY --from=deps /home/node/packages/foundation/package.json packages/foundation/package.json COPY --from=deps /home/node/packages/mtls/package.json packages/mtls/package.json COPY --from=deps /home/node/packages/oauth/package.json packages/oauth/package.json @@ -83,6 +85,7 @@ COPY --from=builder /home/node/packages/dpop/dist/ packages/dpop/dist/ COPY --from=builder /home/node/packages/federation-apple/dist/ packages/federation-apple/dist/ COPY --from=builder /home/node/packages/federation-github/dist/ packages/federation-github/dist/ COPY --from=builder /home/node/packages/federation-google/dist/ packages/federation-google/dist/ +COPY --from=builder /home/node/packages/federation-oidc/dist/ packages/federation-oidc/dist/ COPY --from=builder /home/node/packages/foundation/dist/ packages/foundation/dist/ COPY --from=builder /home/node/packages/mtls/dist/ packages/mtls/dist/ COPY --from=builder /home/node/packages/oauth/dist/ packages/oauth/dist/ From f592e477c7a2e8b4ebe08ee4e0ef464ddd57fdfb Mon Sep 17 00:00:00 2001 From: yoshi49535 Date: Mon, 14 Sep 2026 15:16:41 +0900 Subject: [PATCH 2/2] test(e2e): pin provider v0.13.0 and verifier v0.10.0 release cuts before tagging Pre-tag E2E for both minor releases, in the order the release rule requires: cut merged -> umbrella E2E green -> tag. PROVIDER_REV moves from 84609f33 (v0.12.1) to 4c44adfbf8e780863c1d7c22bf0129a86bdc62d9 (release: v0.13.0, o3co/auth.provider#585). VERIFIER_REV moves from 6d6a26a4 (v0.9.0) to cc982b795efc8807712b3db9ef596182a3bfd815 (release: v0.10.0, o3co/auth.policy-verifier#240). PROXY_REV / PROVIN_REV are unchanged. The provider pin needs the previous commit: its standalone template depends on the new @o3co/auth-provider-federation-oidc, which the provider image did not carry. Co-Authored-By: Claude Opus 5 (1M context) --- Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index b0954bc..6a2c706 100644 --- a/Makefile +++ b/Makefile @@ -1,7 +1,7 @@ # Tested component revisions. Update these deliberately and rerun the full E2E. -PROVIDER_REV := 84609f33f0fd704c260735fd918413f0ceebfe13 +PROVIDER_REV := 4c44adfbf8e780863c1d7c22bf0129a86bdc62d9 PROXY_REV := 9fc0dab66bcbb74c189c2b17812cf50851b9d2f2 -VERIFIER_REV := 6d6a26a43959c85558fabf834d2dbc3d32c41a86 +VERIFIER_REV := cc982b795efc8807712b3db9ef596182a3bfd815 PROVIN_REV := abb14d9ff971e88261447dd255863301f22c3a7c define clone_or_pull