Harden source release preparation and record verified security follow-up

2026-09-08 08:04:12 +02:00
parent 9554657bb5
commit 58d320d9b3
26 changed files with 3833 additions and 163 deletions
@@ -23,6 +23,7 @@ class RepositorySpec:
@dataclass(frozen=True, slots=True)
 class VersionSnapshot:
    pyproject: str | None = None
+    developer_meta: str | None = None
    package: str | None = None
    webui_package: str | None = None
    manifests: tuple[str, ...] = ()
@@ -32,6 +33,7 @@ class VersionSnapshot:
    def primary(self) -> str | None:
        return (
            self.pyproject
+            or self.developer_meta
            or self.package
            or self.webui_package
            or (self.manifests[0] if self.manifests else None)