Skip to content

ci: recover immutable-tag releases through protected main - #78

Merged
loadingalias merged 1 commit into
mainfrom
fix/release-recovery
Aug 3, 2026
Merged

ci: recover immutable-tag releases through protected main#78
loadingalias merged 1 commit into
mainfrom
fix/release-recovery

Conversation

@loadingalias

Copy link
Copy Markdown
Owner

Summary

  • add a protected-main recovery dispatch for an existing signed release tag
  • bind preflight, artifacts, evidence, manifest, and publication to the resolved tag commit
  • upgrade cargo-semver-checks to 0.50.0 for rustdoc JSON v60 and install it from reviewed main during recovery
  • document and regression-test the recovery contract

This unblocks the existing immutable v0.8.0 tag at 2c76ca497a7b4f4acf72062a07267d29fe69aeae; the first Release run failed before publication because cargo-semver-checks 0.48.0 only understood rustdoc JSON through v57.

Validation

  • just push-full
  • just check-actions
  • cargo semver-checks --package rscrypto --all-features with cargo-semver-checks 0.50.0
  • git diff --check

No release change fragment: this changes maintainer release tooling only.

Manual recovery checks out the existing signed tag while running reviewed workflow tooling from main. Upgrade cargo-semver-checks to 0.50.0 so the pinned nightly rustdoc format is supported.
@loadingalias
loadingalias merged commit 4383246 into main Aug 3, 2026
16 checks passed
@loadingalias
loadingalias deleted the fix/release-recovery branch August 4, 2026 02:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant