Skip to content

ci: harden release workflow validation#224

Open
NikolayS wants to merge 1 commit intomainfrom
fix/release-workflow-hardening
Open

ci: harden release workflow validation#224
NikolayS wants to merge 1 commit intomainfrom
fix/release-workflow-hardening

Conversation

@NikolayS
Copy link
Copy Markdown
Owner

@NikolayS NikolayS commented May 7, 2026

Follow-up to #222.

Fixes two release workflow issues found during REV review:

  • Pin Go release workflow checkouts to github.sha in both validate and publish jobs, so protected environment approval cannot publish a later, unvalidated main revision.
  • Make the Python release workflow accept PEP 440 versions such as 0.2.0.dev1 / 0.2.0rc1 and reject Git-style 0.2.0-dev, matching clients/python/RELEASE.md and PyPI behavior.

Validation run locally:

  • parsed edited workflow YAML with Python/PyYAML
  • git diff --check

@NikolayS NikolayS force-pushed the fix/release-workflow-hardening branch from 2d3e7b4 to 895e4dc Compare May 7, 2026 04:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant