v1 Unit 6: Canary migration

[mairas]

Part of the shared-workflows v1 plan (tracking issue: issue 49).

Goal: Prove v1 on one repo per kind before the major tag moves.

Requirements: R6, R7

Dependencies: Units 2–4 on an rc tag

Canaries: halos-org/halos-browser-trust (halos-org deb), hatlabs/halos-halpi-desktop-branding (hatlabs deb, no tests job), halos-org/skip-freeboard-panel (npm), halos-org/docs-tools (tag-only; lands after docs-tools PR 31), hatlabs/signalk-halpi (deb + npm, cross-org; after skip-freeboard-panel publishes).

Approach: One PR per canary pinned to @v1.0.0-rc.N, using the Unit 7 per-repo procedure. Verify the main run and a published release. After Unit 5, a second PR repins to @v1; it is required even when v1.0.0 equals the last rc commit, because the ref string differs. Each canary merge cuts a new +N pre-release and an unstable dispatch; that is accepted.

signalk-halpi builds with an explicit npm run build and has no prepublishOnly. Its migration PR adds the lifecycle script so publish-npm.yml needs no build input. In its release.yml, apt-publish and publish-npm are independent; a failed npm publish after a successful APT dispatch is not rolled back and is re-run by hand.

Test expectation: covered by Units 2–4 scenarios executed on these repos.

Verification: Each canary has one green PR, one release equivalent to its previous release, and protection requiring status.

[mairas]

v1.0.0-rc.1 is published as a pre-release on 461ac92, which includes the issue 58 fix and the v1 README. move-major-tag skipped it; no v1 tag exists yet. Canaries can pin @v1.0.0-rc.1.

[mairas]

Resolved the deferred plan question on nested ./ references: halos-browser-trust PR 7 run 35235916711 logs halos-org/shared-workflows/.github/workflows/version-bump-check.yml@refs/tags/v1.0.0-rc.1 (461ac920…) for the call checks.yml makes with uses: ./.github/workflows/version-bump-check.yml. The relative call follows the caller's pinned tag; no explicit @v1 reference is needed.

Canary PRs open and green: halos-browser-trust PR 7, skip-freeboard-panel PR 4. Both repos now require only status (strict, admins included).

[mairas]

Stable path verified on the deb canary. Publishing halos-browser-trust's v0.1.0+7 draft (target 0db9650, one .deb asset) started release.yml run 35255857818, which dispatched package-updated with channel: stable. apt.halos.fi run 35255869307 added pool/trixie-stable/main/halos-browser-trust_0.1.0-7_all.deb and rebuilt trixie-stable/main (29 packages).

Both canaries also carry .coderabbit.yaml now. Remaining for this unit: halos-halpi-desktop-branding, docs-tools, signalk-halpi, and a real npm publish from skip-freeboard-panel (1.0.0 is already published, so its releases only exercise the skip path).