Repository navigation
ci(release): release from tags through release.yml - #3506
Merged
Merged
Conversation
… ci/release-from-tags-pipeline
… ci/release-from-tags-changelog
… ci/release-from-tags-build
…build # Conflicts: # project.yml
…pipeline # Conflicts: # .github/workflows/build-plugin.yml # .github/workflows/build.yml # scripts/release-plugin-for-shipped-app.sh
… ci/release-from-tags
…into ci/release-from-tags # Conflicts: # CHANGELOG.md
# Conflicts: # .claude/rules/ci.md # .claude/rules/plugin-system.md # CHANGELOG.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
Step 23 of the release rewrite, the cutover: a
v*tag builds, notarizes and publishes the app and every registry plugin throughrelease.yml. Merges in the freeze window with steps 20-23.Change
release.yml,pages.yml,withdraw.yml,scripts/release/notarize.sh,ExportOptions.plist,describeinpackage.sh plugins, theapple-signingrewrite for the App Store Connect key andsetup-xcoderequire-release.0.0.0-devlocally). What's New is written at build time fromCHANGELOG.md.[Unreleased]entries becomechangelog.d/fragments;check-changelog.pyruns in Repo Hygiene and PR title, which skips the one PR that createschangelog.d/.govulncheckmoves to Repo Hygiene's HANA step.build.yml,build-plugin.yml,build-release.sh,create-dmg.sh,build-plugin.sh, the plugin re-release scripts,Version.xcconfig,WhatsNew.md,release-flags.json,.github/scripts/and the oldscripts/cirelease helpers.RELEASING.md, thereleaseskill,plugin-registry.json(keyed by target) and the CI, plugin, bridge, storage and changelog rules.After the merge (maintainer)
REGISTRY_DEPLOY_KEY, andAPPCAST_DEPLOY_KEYfromrelease.SPARKLE_PRIVATE_KEYinreleasefrom the step 2 file.rm ~/.ssh/tablepro_release*.bypass_actors: []on ruleset 23957966.Verified
WhatsNewContentTestschanged on purpose (no bundled notes now means no link).build.sh app --unsigned490 s,package.sh app87 s,build.sh plugins --unsigned172 s cold,package.sh plugins10 s (26 plugins described).0.0.0-dev,WhatsNew.mdat 0.81.0.codesignwith "Developer ID Application: Dat Ngo Quoc (D7HJ5TFYCU)" hung on the login keychain's private key prompt and was killed after 90 s. The keychain is unlocked and timestamp.apple.com answers, sobuild.sh pluginswas not run signed. Needs "Always Allow" on that prompt, orsecurity set-key-partition-list -S apple-tool:,apple:,codesign: -s.build.sh appsigned: skipped. This Mac has no Developer ID profile forcom.TablePro, only the Apple Development "Mac Team Provisioning Profile: com.TablePro".notarize.sh: skipped. NoTablePronotarytool keychain profile yet, since the App Store Connect key is not on this Mac.Not in this PR
feedsbranch (step 19) andCLOUDKIT_MANAGEMENT_TOKENinsigning.