[launchdarkly-octoauth]

Copies launchdarkly/ld-openapi-private@1bc011a7ff onto this repository for API client release 25.2.0: one commit whose tree is exactly the private repository's main.

This makes that content public. Merge it once it has been reviewed; a later release replaces this pull request if it is still open. Merging with any method keeps the tree, which is what the next sync checks. Do not add commits here: change launchdarkly/ld-openapi-private instead.

Files that change (21)

    A	.github/launchdarkly/ld-openapi-release-pr.sts.yaml
    M	.github/workflows/ci.yml
    A	.github/workflows/mirror-public.yml
    A	.github/workflows/release-pr.yml
    M	.github/workflows/release.yml
    M	.github/workflows/token-audit.yml
    R067	CLAUDE.md	AGENTS.md
    A	CHANGELOG.md
    M	Makefile
    A	release-manifest.json
    A	scripts/release/client-surface.py
    A	scripts/release/dispatch-gonfalon-bump.sh
    A	scripts/release/gonfalon-changelog.py
    D	scripts/release/gonfalon-update.sh
    M	scripts/release/mirror-public.sh
    M	scripts/release/preflight.sh
    M	scripts/release/prepare.sh
    A	scripts/release/release-notes.py
    M	scripts/release/selfcheck.sh
    A	scripts/release/sync-release-pr.sh
    M	scripts/release/token-audit.sh

---

Note

Overview
This PR replaces manual release dispatch with a bot-maintained release/next PR (release-pr.yml + sync-release-pr.sh). The bot compares production’s OpenAPI spec to release-manifest.json, derives semver via oasdiff/client-surface.py, and updates release-manifest.json and CHANGELOG.md. Merging that PR triggers release.yml on release-manifest.json changes; preflight now enforces an approved manifest, pins the spec from gonfalon, and passes verified bytes into make SPEC_FILE=....

Release and mirror workflows gain private-repo guards, OctoSTS policies for release-PR pushes and public mirroring, and npm trusted publishing (dropping NPM_TOKEN from audit/prepare). Public sync opens or updates a mirror/sync PR instead of force-pushing main. Gonfalon downstream work splits into a separate changelog PR and a dispatch-and-wait bump via gonfalon’s own workflow.

CI adds a nightly schedule (private repo only), Ruby 3.3–4.0 matrix, and useOneOfDiscriminatorLookup on generated clients. Docs move from CLAUDE.md to AGENTS.md describing the new flow; this sync also ships CHANGELOG.md and initial release-manifest.json for 25.2.0.

^{Reviewed by Cursor Bugbot for commit 28e42a0. Bugbot is set up for automated code reviews on this repo. Configure here.}