Skip to content

Use publishable tags for prebuilt releases - #78

Merged
SaladDay merged 2 commits into
mainfrom
codex/release-legal-tag
Sep 23, 2026
Merged

SaladDay merged 2 commits into
mainfrom
codex/release-legal-tag

Conversation

@SaladDay

@SaladDay SaladDay commented Sep 23, 2026 •

Copy link
Copy Markdown
Collaborator

GitHub rejects a published release whose tag is a raw 40-character commit SHA. Manual builds now use build-<SHA> and tag builds retain the triggering v* tag; the artifact download URL and draft tag share that value, while filenames and source provenance stay pinned to the full SHA.

Clarifies that a recorded address/checksum-only packaging correction must preserve every other archive member and verify final published URLs and digests. No application, binary or image changes.

Validation: actionlint 1.7.12 with ShellCheck 0.11.0, 12 manifest tests, and extracted workflow-shell checks for manual/tag builds, SHA rejection and URL/draft consistency passed. The release batch already completed server make check with four known Dashboard failures (WEB-TEST-002); this workflow-only follow-up does not rerun model combinations. Local make check cannot start with the installed older Go toolchain. Small follow-up independently inspected by the main thread.


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith with what you need. Autofix is disabled.

@SaladDay
SaladDay merged commit fcb0fb3 into main Sep 23, 2026
2 of 3 checks passed
@SaladDay
SaladDay deleted the codex/release-legal-tag branch October 10, 2026 05:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant