fix(release): smooth recovery - #778
Conversation
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 8aa6e9d51d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 1c3fe0d940
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
95f19b2 to
d0356e5
Compare
jeremi
changed the title
Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
d0356e5 to
bcb8c3d
Compare
1 participant
Summary
gh run watchoutput behind--verbose-waitverify-recoverycommand that validates supported tags, exact candidate identity, manifest binding, attestations, promotion lifetime, protected-main ancestry, and release state before printing a retry command.github/workflows/release.ymlas the fail-closed authority that reconciles publication state immediately before writesThe deterministic docs archive work formerly included here was split into docs-only draft PR #779 to keep each PR within one owning area.
Validation
python3 -m unittest release/scripts/test_registry_release.py release/scripts/test_verify_public_release.py release/scripts/test_release_workflow_structure.py release/scripts/test_check_release_source_model.py(125 passed)release/scripts/registry-release validate-currentrelease/scripts/registry-release validate-docsets(24 docsets)REGISTRY_RELEASE_SOURCE_MODE=monorepo release/scripts/check-release-source-model.shpython3 -m py_compile release/scripts/registry-releaseactionlintgit diff --checkReview notes
This changes recovery and release-provenance handling.
verify-recoveryis deliberately read-only: it validates and reports the protected-main retry command but never dispatches it.