Align all release version declarations
Dependency Audit / dependency-audit (push) Failing after 1m44s
Deployment Installer / deployment-installer (push) Successful in 6s
Security Audit / security-audit (push) Failing after 10m42s

This commit is contained in:
2026-08-04 15:06:36 +02:00
parent 8e890b37ed
commit 492449a4e2
3 changed files with 60 additions and 10 deletions
+5
View File
@@ -66,6 +66,11 @@ tags. The default preflight intentionally does not require those heads to exist
in the previous release baseline. A failed candidate-baseline check therefore
cannot produce a protected package release.
The source gate validates `pyproject.toml`, module `MODULE_VERSION`, public
package `__version__`, and WebUI metadata before creating tags. Release-tag
artifact checks run only after the candidate tags and immutable WebUI lock have
been created locally.
It builds one wheel and, where applicable, one npm tarball. The workflow records
the source tag, source commit, filename, size, and SHA-256 in
`package-artifacts.json` before publishing. Gitea rejects a second upload of the