Fix signed release tag checkout and retry #30

Merged
pti merged 1 commit from fix/release-tag-checkout into main 2026-07-24 12:44:11 +02:00
Owner

Restores the annotated release tag after Forgejo checkout replaces it with the peeled commit so signature verification can succeed. Adds manual retry support for an existing immutable signed tag. Moves release only GnuPG out of the shared manifest after the enlarged CI image failed registry upload with HTTP 413. Validated tag restoration against wraptool v0.2.0 plus tests vet lint shell tests YAML parsing and diff checks.

Restores the annotated release tag after Forgejo checkout replaces it with the peeled commit so signature verification can succeed. Adds manual retry support for an existing immutable signed tag. Moves release only GnuPG out of the shared manifest after the enlarged CI image failed registry upload with HTTP 413. Validated tag restoration against wraptool v0.2.0 plus tests vet lint shell tests YAML parsing and diff checks.
fix(release): preserve annotated tags in CI
All checks were successful
Lint / lint (pull_request) Successful in 21s
c85eaed5e2
Forgejo checkout replaces an annotated tag ref with its peeled commit, preventing signature verification. Restore the remote tag before verifying and allow immutable-tag retries without moving a published release tag. Keep release-only GnuPG out of the shared container image to avoid oversized registry layers.
pti merged commit dcf2cc2013 into main 2026-07-24 12:44:11 +02:00
pti deleted branch fix/release-tag-checkout 2026-07-24 12:44:21 +02:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pti/wraptool!30
No description provided.