Automate release version tagging #29

Merged
pti merged 4 commits from feat/release-version into main 2026-07-24 12:29:43 +02:00
Owner

Adds a guarded release-version command for patch minor major or explicit SemVer releases. Uses the Git tag as the sole release version source and derives artifact names plus the linker injected binary version from exact git describe output. Also publishes build provenance metadata. Validation includes tests lint vet six target cross compilation and an end to end release against a disposable remote.

Adds a guarded release-version command for patch minor major or explicit SemVer releases. Uses the Git tag as the sole release version source and derives artifact names plus the linker injected binary version from exact git describe output. Also publishes build provenance metadata. Validation includes tests lint vet six target cross compilation and an end to end release against a disposable remote.
Use release tags as the sole semantic version source and guard tag creation behind clean-tree, synchronized-main, SemVer, and test checks.
fix(release): check tagger identity early
All checks were successful
Lint / lint (pull_request) Successful in 11m9s
260ad6e87f
feat(release): verify signed release tags
All checks were successful
Lint / lint (pull_request) Successful in 21s
8884917b5e
Pin the release public key and reject unsigned or wrong-key tags before CI builds artifacts. Keep the private signing key exclusively in the trusted host keyring.
fix(release): pin verified tag signer
All checks were successful
Lint / lint (pull_request) Successful in 23s
e52ba41ede
Reject signatures whose GPG status identifies a different primary key, even if extra keys enter the committed keyring. Add repeatable release-script guard and version-bump tests to CI.
pti merged commit b75f765dd6 into main 2026-07-24 12:29:43 +02:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pti/wraptool!29
No description provided.