Release health - unreleased work or an incomplete publish

[github-actions]

Automated release-health check. This issue is rewritten in place on every run and closed automatically once every gap below is closed; it is never duplicated.

Last evaluated: 2026-07-29T03:30:52.180872+00:00 (run)

unreleased-work — 19 releasable commit(s) unpublished for 2d 7h

main has been carrying 19 releasable commit(s) for 2d 7h past v0.14.0. main CI is green and no release run is in flight, so nothing is going to publish these on its own.

Next version would be a minor bump.

commit	bump	age	subject
e4244961	minor	2d 7h	feat: capability-aware surface availability with precise remediation (Section 6) (#64)
7ab0d6bc	patch	1d 13h	fix: keep browser provisioning substrate-aware (#67)
3cb7adbc	patch	1d 12h	fix(release): point "Latest" at the native installers (#69)
1685ea8a	patch	1d 10h	fix: make the local Desktop cockpit account-free (#72)
92a56db3	patch	1d 9h	fix(release): mirror the attested installer set onto the engine release (#73)
c8878906	patch	1d 9h	fix: attest observed qualification capabilities (#74)
0ceae7ce	patch	1d 7h	fix(policy): bind the resolved safety policy to dispatched runs (#76)
3e51a347	minor	1d 7h	feat(portal): add the runner-local mobile decision portal and QR pairing (#75)
571b338c	patch	1d 7h	fix(test): read portal shell assets as UTF-8 (#77)
ccd608d9	patch	1d 5h	fix(portal): freeze the attended console and wire the decision portal to a deployment target (#78)
6f354098	patch	1d 5h	fix(portal): kill the console process tree and stop deriving temp dirs from pins (#80)
32991157	patch	1d 5h	fix(portal): teach the phone the receipt shape and say what actually broke (#79)
8204c455	patch	1d 3h	fix(installer): ship a capture the bundled Flow will actually accept (#81)
33827dea	patch	1d 3h	fix(portal): stop the phone recommending continue, and put the reading on the path to the answer (#82)
89dde2c1	minor	1d 1h	feat(portal): render the reject answer and keep the action bar usable (#84)
5b8e6c48	patch	1d 0h	fix(auth): stop the unwired browser-PKCE provider from stalling login (#86)
d918b631	patch	1d 0h	fix(scrubber): refuse a scrub that could not run instead of reporting zero redactions (#87)
e3257f78	minor	21h 49m	feat: compile recordings automatically after stop (#88)
1aecd3d2	minor	20h 14m	feat(auth): add loopback pairing and credential rotation (#90)

Most recent release run: 30203319020 — completed/success.

Publish with:

gh workflow run release.yml --repo OpenAdaptAI/openadapt-desktop --ref main -f operation=semantic-release

tag-without-release — 4 tag(s) published no release

4 tag(s) in the native lane exist with no GitHub release object. The tag is immutable and public; the artifacts it promises were never published.

tag	age	release run	outcome
desktop-v0.1.0	12d 22h	29514474536	failure
desktop-v0.7.0	8d 11h	29756479649	cancelled
desktop-v0.8.0	7d 23h	29799291231	cancelled
desktop-v0.12.0	3d 8h	30169968004	failure

cancelled and skipped are the outcomes no if: failure() step can see. A run cancelled while waiting on an environment approval gate lands here.

Re-run the publish with:

# Rebuild the installers for an existing engine version (X.Y.Z), then
# approve the native-release environment when the publish-draft job requests it.
gh workflow run native-freshness.yml --repo OpenAdaptAI/openadapt-desktop --ref main -f version=X.Y.Z

Everything the check considered and cleared

• [engine] openadapt-desktop 0.14.0 is on PyPI.

Reproduce locally with python scripts/check_release_health.py.