feat(release): promote release candidate images #110

Merged
jwilger merged 3 commits from feat/release-candidate-images into main 2026-05-06 09:47:44 -07:00
Owner

Summary

  • Builds and publishes release PR candidate images with a candidate-scoped token.
  • Promotes the exact candidate image during final release publish instead of rebuilding.
  • Documents candidate image provenance and release credential blast radii.

Verification

  • nix develop --command bash tests/release_tooling_test.sh
  • nix flake check

Closes #107

## Summary - Builds and publishes release PR candidate images with a candidate-scoped token. - Promotes the exact candidate image during final release publish instead of rebuilding. - Documents candidate image provenance and release credential blast radii. ## Verification - nix develop --command bash tests/release_tooling_test.sh - nix flake check Closes #107
fix(release): publish version tags and Forgejo releases
All checks were successful
CI / Nix flake check (pull_request) Successful in 2m39s
CI / auto_review semantic review (pull_request) Successful in 1s
auto_review auto_review: 3 warnings
Publish release / release-publish (pull_request) Has been skipped
a5e95a16c7
feat(release): promote release candidate images
All checks were successful
CI / Nix flake check (pull_request) Successful in 2m45s
CI / auto_review semantic review (pull_request) Successful in 2s
auto_review auto_review: no findings
0bc9196749
auto-review approved these changes 2026-05-06 09:39:24 -07:00
Dismissed
auto-review left a comment

This PR introduces changes to the release workflows to promote release candidate images instead of rebuilding them during the final release. It also updates documentation to reflect these changes. The changes appear safe to merge, but testing is recommended to ensure the new workflows function as expected.

Walkthrough

  • Workflows:
    • .forgejo/workflows/release-prepare.yml and .forgejo/workflows/release-publish.yml have been updated to handle release candidate images.
    • The skopeo copy command is used to promote candidate images to final release tags.
    • The tea pr create and tea pr edit commands are used to manage PR descriptions with candidate image information.
  • Documentation:
    • docs/OPERATIONS.md and docs/THREAT-MODEL.md have been updated to document the new release process and credential usage.
  • Testing:
    • tests/release_tooling_test.sh includes new tests to verify the release workflows and ensure they handle candidate images correctly.
This PR introduces changes to the release workflows to promote release candidate images instead of rebuilding them during the final release. It also updates documentation to reflect these changes. The changes appear safe to merge, but testing is recommended to ensure the new workflows function as expected. ## Walkthrough - **Workflows**: - `.forgejo/workflows/release-prepare.yml` and `.forgejo/workflows/release-publish.yml` have been updated to handle release candidate images. - The `skopeo copy` command is used to promote candidate images to final release tags. - The `tea pr create` and `tea pr edit` commands are used to manage PR descriptions with candidate image information. - **Documentation**: - `docs/OPERATIONS.md` and `docs/THREAT-MODEL.md` have been updated to document the new release process and credential usage. - **Testing**: - `tests/release_tooling_test.sh` includes new tests to verify the release workflows and ensure they handle candidate images correctly.
Merge origin/main into feat/release-candidate-images
All checks were successful
CI / Nix flake check (pull_request) Successful in 2m45s
CI / auto_review semantic review (pull_request) Successful in 1s
auto_review auto_review: no findings
Publish release / release-publish (pull_request) Has been skipped
2fdb6a0f42
auto-review left a comment

This PR updates the project to build and publish release candidate images with a candidate-scoped token, promoting the exact candidate image during final release publish. It also updates the version to 0.1.3 across multiple files, ensuring consistency in the release process.

Walkthrough

  • CHANGELOG.md: Added a new section for version 0.1.3, documenting fixes and other changes.
  • Cargo.lock: Updated the version of several packages to 0.1.3 to reflect the new release.
  • Cargo.toml: Bumped the workspace package version to 0.1.3.
This PR updates the project to build and publish release candidate images with a candidate-scoped token, promoting the exact candidate image during final release publish. It also updates the version to `0.1.3` across multiple files, ensuring consistency in the release process. ## Walkthrough - **CHANGELOG.md**: Added a new section for version `0.1.3`, documenting fixes and other changes. - **Cargo.lock**: Updated the version of several packages to `0.1.3` to reflect the new release. - **Cargo.toml**: Bumped the workspace package version to `0.1.3`.
jwilger deleted branch feat/release-candidate-images 2026-05-06 09:47:45 -07:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Slipstream/auto_review!110
No description provided.