After checking out a pinned upgrade base, fill secret-version variables removed from the current recipe's .env.sample. This lets a v5 La Suite Docs base generate its collab_ss secret.
Supply the two operator-managed RSA PEM keys required by the published v6 release before a v5-to-v6 upgrade.
Choose an unused OIDC secret version during canonical promotion so an old warm secret cannot block a new realm.
Keep all install, upgrade, backup, restore, and custom assertions unchanged.
Evidence
Unit tests: 15 passed. A cold run of tagged 1.0.1+v6.0.4 passed every test tier at level 5; it exposed a separate stale OIDC secret during canonical promotion, addressed in the final commit. A second full cold run is in progress to verify promotion.
## What changed
- After checking out a pinned upgrade base, fill secret-version variables removed from the current recipe's `.env.sample`. This lets a v5 La Suite Docs base generate its `collab_ss` secret.
- Supply the two operator-managed RSA PEM keys required by the published v6 release before a v5-to-v6 upgrade.
- Choose an unused OIDC secret version during canonical promotion so an old warm secret cannot block a new realm.
- Keep all install, upgrade, backup, restore, and custom assertions unchanged.
## Evidence
Unit tests: 15 passed. A cold run of tagged `1.0.1+v6.0.4` passed every test tier at level 5; it exposed a separate stale OIDC secret during canonical promotion, addressed in the final commit. A second full cold run is in progress to verify promotion.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
What changed
.env.sample. This lets a v5 La Suite Docs base generate itscollab_sssecret.Evidence
Unit tests: 15 passed. A cold run of tagged
1.0.1+v6.0.4passed every test tier at level 5; it exposed a separate stale OIDC secret during canonical promotion, addressed in the final commit. A second full cold run is in progress to verify promotion.