Make stable release promotion copy and verify asset bytes #1580
No reviewers
Labels
No labels
burndown-2026-06
pressure-test
sunday-sprint
autonomy
async-consult
autonomy
epic
autonomy
headless
autonomy
live-collab
coherence-core
priority
P0
priority
P1
priority
P2
priority
P3
priority
P4
qa-fixture
role/ai
role/creator
role/design
role/director
role/engineer
role/exec
role/human
role/ops
role/qa
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
coilyco-flight-deck/ward!1580
Loading…
Reference in a new issue
No description provided.
Delete branch "issue-1575"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This updates stage-two release promotion so the workflow first fetches and verifies the staged draft bytes, then uploads the verified files, then reads the stable release back before publication. The GitHub mirror continues to consume the already-verified
distset.scripts/promote-draft-assets.shandscripts/verify-release-assets.sh..forgejo/workflows/release.ymlthrough the new helpers.Tests:
go test ./scripts -run 'TestReleasePipelineUsesDraftArtifacts|TestForgejoReleaseAssetHelperReadsRawAssetBody|TestForgejoReleaseAssetHelperPassesMultilineBodiesThrough|TestPromoteDraftAssetsVerifiesAndStagesRawBytes|TestPromoteDraftAssetsRejectsBadDraftPayloads|TestVerifyReleaseAssetsReadsBackStableBytes'make vetmake lintpre-commit run --all-filesmake teststill fails in pre-existingcmd/wardtests unrelated to this release path.closes #1575