SivanCola d9dd4aa0e5 fix(registry): re-review publisher updates / 发布者更新重新进入审核 (#6830) ...

* fix(registry): re-review publisher updates

Problem:
Publishers could replace the source, manifest, or metadata of an active package while it stayed live and retained its verified badge.

Root cause:
Registry moderation was triggered only when the public package kind changed, although every accepted republish creates a new immutable package version.

Fix:
Return every non-admin package update to pending review, clear verification, and cover active, hidden, rejected, and trusted-admin update paths.

Verification:
- workers/crash-report: npm test (35 passed)
- workers/crash-report: npm run typecheck
- git diff --check

* fix(registry): fence approvals to reviewed revision

Problem:
A stale moderation page could approve a package version submitted after the reviewer loaded the queue.

Root cause:
Approval requests carried only the slug and action, while both admin backends performed unconditional status updates.

Fix:
Bind approvals to the reviewed version, update timestamp, and status with one atomic D1 conditional update. Stale or old-page requests now fail closed across both admin interfaces.

Verification:
- worker tests: 41 passed
- worker typecheck
- site tests: 26 passed
- site production build
- git diff --check

2026-07-22 21:24:27 +08:00

..

accounts

feat(crash): unify dashboard auth onto id.reasonix.io identity (#5701)

2026-07-01 16:26:24 +08:00

crash-report

fix(registry): re-review publisher updates / 发布者更新重新进入审核 (#6830)

2026-07-22 21:24:27 +08:00

forum

fix(forum): let staff bypass the trust-based post gates (#5713)

2026-07-01 17:32:09 +08:00