[ako]

Syncs ako/mxcli:main into upstream: 10 commits since #1806 — #1783 and #1787 as submitted, a Go toolchain bump for a new advisory, and page round-trip fixes.

mxcli test: #1783 and #1787 (by @MendixMau)

Both PRs are included at their submitted heads, so merging this with a merge commit marks them merged.

• --reuse-build (feat(test): --reuse-build skips injection and mxbuild when nothing changed #1783) skips injection and mxbuild when the project, the test files and mxcli are unchanged, reusing the deployment the last run left. The key is a content hash, never a timestamp, and the record pins deployment/model/model.mdp's identity, so a build made by anything else is never taken for ours. theme-cache/ is excluded from the hash, because mxbuild rewrites theme.compiled.css with a cache-busting query on every build: without that the key never repeated (reuse hit 12 s vs ~60–67 s). Fixes feat: mxcli test --reuse-build — skip injection and mxbuild when nothing changed #1782
• test --watch recovers builds on a fresh mxbuild --serve (fix: mxcli test --watch never recovers a failed rebuild on a long-lived serve process #1787): its rebuild called the serve process directly, so the recovery run --local --watch uses never ran, and every change after the second build reported "could not be applied". It now goes through the same recovery, recognises mxbuild's resource-key form of the failure (IO_PathNotFound_Path, seen on 11.15 macOS), and skips the client-bundle restart a headless test run doesn't need. Refs fix: mxcli test --watch never recovers a failed rebuild on a long-lived serve process (macOS IO_PathNotFound_Path) #1786
• Review follow-ups on top: a dead variable removed, .git and node_modules skipped at any depth in the hash (with a control test), CHANGELOG entries and a --reuse-build line in the running-tests docs.

Security: Go toolchain 1.27.4

govulncheck fails every build on 1.27.3: GO-2026-6859, a net/http MaxBytesReader header race, fixed in 1.27.4. The advisory is new, so upstream main fails the same scan; on 1.27.4 govulncheck reports nothing reached.

Pages: an unchanged page's round trip writes nothing

describe → exec rewrote Studio Pro pages that had not changed:

• A check box's label position, a radio button group's orientation and a show-page button's close count had no MDL spelling, so the default overwrote the stored value: a label after the control became Default, every radio group became horizontal, and a show-page button stopped closing its page. mx check stayed green. New: checkbox … LabelPosition: Default|BeforeControl|AfterControl, radiobuttons … RenderHorizontal: true|false, and show page … with (NumberOfPagesToClose: n); describe prints each when it differs from the default.
• Stored formatting and keys are kept: a DynamicClasses or XPathConstraint that differs only in whitespace outside its string literals, an enumeration condition's values in their stored order, and the null SourceVariable key on Forms$AssociationSource (Studio Pro writes it on 40 of 40). A system member a specialisation inherits resolves to the entity that stores it.

8 WorkflowCommons snippets now round-trip exactly and leave the round-trip suite's allowlist