feat(release): Add Stable 1.0 RC freeze#1382
Merged
Merged
Conversation
Add canonical stable-review RC orchestration with candidate-bound prerequisites, deterministic freeze and drift verification, production artifact provenance, and fail-closed promotion reporting. Add the protected non-publishing workflow, release-note generation, schemas, offline fixtures, and operator documentation while preserving integer build and tag policy.
Bind third-party intake evidence to the integer candidate build, normalize execution-only temporary producer paths, and preserve staged POSIX app launchers as executable in deterministic archives. Extend Stable RC tests and operator guidance for the strengthened release-integrity invariants.
Resolve TemporaryDirectory roots before constructing test workspaces and archive sources so the macOS /var to /private/var alias does not trigger false confinement failures. Keep production symlink and workspace safety checks unchanged.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
certify.py stable-rcrelease-manager workflow on top of the protectedstable-reviewproduction pipeline and require candidate-bound Stable 1.0 readiness and production evidencev<build>tag policy; this workflow cuts an RC and does not publish Stable 1.0 GAReview notes
app.execand migration launchers as executable while keeping Windows command files non-executableHow to test
./gradlew spotlessApplypython3 tools/release-certification/certify.py stable-rc --self-test— 50 tests passedpython3 tools/release-certification/certify.py production-beta --self-test— 17 tests passedpython3 tools/release-certification/certify.py self-test all— 184 tests passedpython3 -m compileall -q tools/release-certification/cryptad_certificationactionlint .github/workflows/stable-1.0-rc-release.ymlgit diff --check origin/develop...HEAD