Skip to content

release-validation.md

Latest commit

 

History

History
68 lines (52 loc) · 1.99 KB

release-validation.md

File metadata and controls

68 lines (52 loc) · 1.99 KB
Raw

Release validation

Current status

Target: v0.1.0-beta.1 (normal GitHub Release, not Pre-release)
Last updated: 2026-07-31

Check Result
npm run build (frontend) OK
npm run validate:runtime (extended protocol) OK when sidecar present
cargo test (Docker / host) OK
cargo check (no warnings) OK
Tauri release binary OK on host with GTK deps
AppImage x86_64 (CI Ubuntu) On tag
Beta manual test (beta-test-plan.md) Required before v0.1.0-beta.1 tag
SBOM + cosign (release workflow) On v* tags when secrets configured

Go / no-go — ship v0.1.0-beta.1

All must be true:

  1. beta-test-plan.md signed PASS
  2. CI green on release tag
  3. x86_64 AppImage attached to GitHub Release (not aarch64)
  4. CHANGELOG, README, and docs/releases/v0.1.0-beta.1.md match shipped scope
  5. Release workflow sets prerelease: false for beta tags (alpha tags stay Pre-release)

Shipped in beta.1

  • Linux x86_64 AppImage + run-cotux.sh
  • Paid ChatGPT plans only
  • Shared CODEX_HOME with CLI / VS Code
  • Changes + Files right panel (no Terminal tab)
  • Turn/timeline parity: summaries, plans, activity cards, fork-from-turn, model-changed divider

Deferred after beta.1

  • Embedded terminal tab
  • aarch64 AppImage on Releases (manifest hash + CI hardening)
  • .deb / Flatpak
  • Automated WebDriver E2E
  • Full Codex VS Code feature parity

Verification commands

npm run fetch:runtime
npm run validate:runtime
docker build -f Dockerfile.validate -t cotux-validate .
docker run --rm -v "$PWD":/workspace -w /workspace/src-tauri cotux-validate cargo test
npm run build
npm run tauri build

Artifact verification (release)

When cosign is configured:

cosign verify-blob \
  --certificate-identity-regexp '.*' \
  --certificate-oidc-issuer-regexp '.*' \
  --signature cotux_*.AppImage.sig \
  cotux_*.AppImage

SBOM: sbom.spdx.json attached to each GitHub Release.