didericis/bot-bottle
1
0
Fork 0
Code Issues 32 Pull Requests 9 Actions Packages Releases Wiki Activity

fix(release): publish only verified wheel
prd-number-check / require-numbered-prds (pull_request) Successful in 15s
Details
test / image-input-builds (pull_request) Successful in 42s
Details
test / unit (pull_request) Successful in 56s
Details
test / integration-docker (pull_request) Successful in 1m1s
Details
test / coverage (pull_request) Successful in 15s
Details
tracker-policy-pr / check-pr (pull_request) Failing after 12m49s
Details

Browse Source
This commit is contained in:
didericis (codex)
2026-07-27 16:21:57 +00:00
parent d8c5532168
commit a2113b7f43
2 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/prds/0083-packaged-infra-artifacts.md
+4 -2
View File
@@ -127,10 +127,12 @@ The release job operates on one tested commit:
4. Publish both generic-package artifacts and retain their versions and
compressed-file checksums.
5. Generate `release-manifest.json` from those published identities.
6. Build the wheel/sdist with that manifest.
6. Build the wheel with that manifest. Do not produce a source distribution:
rebuilding an sdist outside this release boundary could replace the pins
with the development manifest.
7. Install the wheel in a clean environment and assert that every manifest
identity is valid and retrievable.
8. Publish the Python distribution.
8. Publish only that verified wheel.
The build hook receives the manifest as a file input. It must not query a
registry or choose versions itself: package builds stay deterministic and