Skip to content

Publish exact release checksums - #38

Closed
biru-codeastromer wants to merge 3 commits into
codex/immutable-release-pipelinefrom
codex/release-checksums-linear-v3
Closed

Publish exact release checksums#38
biru-codeastromer wants to merge 3 commits into
codex/immutable-release-pipelinefrom
codex/release-checksums-linear-v3

Conversation

@biru-codeastromer

@biru-codeastromer biru-codeastromer commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

Summary

  • require the release tag to match the package version exactly
  • build the wheel and source archive in a clean output directory
  • publish a sorted SHA256SUMS file and verify the exact remote asset set
  • retain organization-enforced immutability, draft-first publication, metadata validation, and rerun checks

This supersedes #36 with a clean linear history on the repaired release pipeline.

Validation

  • local make release-gate: 110 passed, 1 optional skip, 91.83% coverage
  • hosted Python 3.11 through 3.13 coverage: 91.65%; hosted Python 3.14 coverage: 91.56%
  • clean wheel installation, dependency audit, example, repository audit, and full-history secret scan passed

@biru-codeastromer
biru-codeastromer marked this pull request as draft August 23, 2026 23:48
@biru-codeastromer
biru-codeastromer changed the base branch from codex/immutable-release-pipeline to main August 23, 2026 23:51
@biru-codeastromer
biru-codeastromer changed the base branch from main to codex/immutable-release-pipeline August 23, 2026 23:53
@biru-codeastromer
biru-codeastromer marked this pull request as ready for review August 24, 2026 00:02
@biru-codeastromer

Copy link
Copy Markdown
Contributor Author

Superseded by merged #41, which preserves this change in the protected v0.4.0 release stack.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants