obsidian-plugin/dsebastien_obsidian-graph-explorer-base-view
1
0
Fork 0
mirror of https://github.com/dsebastien/obsidian-graph-explorer-base-view.git synced 2026-07-22 06:56:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

docs(history): record two-phase release workflow port

Browse source
This commit is contained in:
Sebastien 2026-07-17 08:48:35 +02:00
parent ffb04071e0
commit 3bcab1c441
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
documentation/history/2026-07-17.md Normal file
View file

@ -0,0 +1,5 @@
# 2026-07-17
## Release workflow: two-phase design so attestations bind to the tag commit
Ported the fixed `release.yml` from obsidian-remarkable-sync (verbatim copy). The old shared workflow built and attested artifacts at the triggering commit, then created the version-bump commit and tag — so build-provenance attestations were bound to a different commit than the release tag, and the community-catalog review rejected releases ("attestation failed cryptographic verification"). The new workflow has a "prepare" job (dispatch on a branch: bump/changelog/commit/tag behind a `bun run build` + `bun test` gate, then re-dispatch at the tag with `publish=true`) and a "publish" job (dispatch-at-tag or bare tag push: build, attest without `continue-on-error`, create release at `github.sha` == tag commit). Design proven live on remarkable-sync 1.5.0. `scripts/release.sh` messaging updated to match; `bun test` kept in the gate (85 tests pass) and `docs/release-notes.md` kept in the release commit (generated by `scripts/generate-changelog.ts`).