release(mobile-infra): buzz-push-gateway 0.3.0

[brow]

No description provided.

[github-actions]

🔐 Codex Security Review

Note: This is an automated, security-focused review generated by Codex.
Use it as a supplement to human review; false positives are possible.

Scope

• Exact PR diff: 213092074c269bee90c87163672f9c2b8d714cfe...b568ee0c61dd5ec4b85dd0cc266d24445c4f3c98
• Model: gpt-5.6-sol

💡 Click "edited" above to see earlier reviews for this PR.

---

Review Summary

Overall Risk: NONE

The PR only increments the push gateway Helm chart version from 0.2.0 to 0.3.0. The release branch, chart version, binary appVersion, publishing workflow, and existing release tags are consistent. No concrete security, correctness, or reliability issue was found.

Findings

No concrete security, correctness, or reliability findings were identified.

Notes

• No additional limitations were reported.

---

_{Generated by Codex Security Review |
Requested by: @brow |
Workflow run}

[brow]

@codex review

[brow]

@builderbot review

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-16T19:15:38.658083Z	b568ee0	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[brow]

@buzz-security-review b568ee0

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b568ee0c61

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b568ee0c61

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[brow]

@builderbot review

[jedwards27]

Reviewed exact head b568ee0c61dd5ec4b85dd0cc266d24445c4f3c98 against base 213092074c269bee90c87163672f9c2b8d714cfe.

No author-actionable defects found. The complete delta is the intended chart release identity bump in deploy/charts/buzz-push-gateway/Chart.yaml (0.2.0 → 0.3.0); it changes no templates, values, image coordinates, runtime code, credentials, deployment, or client/UI behavior.

The release contract remains coherent:

• chart version is the immutable publication identity while appVersion: 0.1.0 still matches the gateway workspace binary version;
• branch push-chart-release/0.3.0 maps to post-merge tag push-chart-v0.3.0;
• publication independently verifies semver, tag target, and chart-version equality before packaging;
• that remote tag does not currently exist, so the release does not collide with a prior immutable artifact;
• the already-published 0.2.0 artifact remains available for rollback, and this PR itself performs no rollout.

Exact-head local evidence from clean detached worktrees:

• git diff --check 2130920...b568ee0 passed;
• chart render and release-contract scripts passed (the latter under a UTF-8 locale);
• helm package succeeded, and helm show chart reported version: 0.3.0 / appVersion: 0.1.0 with the expected chart contents;
• HEAD remained exact and the trees remained clean after validation.

Relevant CI is green, including push-gateway chart validation, the general Helm lint/unit-test/render matrix, DCO, Semgrep, and zizmor. The gated kind install and PR-time publication are skipped as designed. Post-merge tag creation, OCI publication, and retrieval of the immutable 0.3.0 artifact remain release-gate evidence owned by CI; no author action is required.