ci: publish the exact tested Signage module package #15

Merged

Zayin_Admin merged 1 commits from fix/release-module-assets into main 2026-10-11 03:05:01 +00:00

Conversation 1 Commits 1 Files Changed 7

+634 -15

ekklesia-bot commented 2026-10-11 02:17:03 +00:00

Member

Copy Link

Copy Source

Summary

• build the canonical Signage Module Package once and transfer it between Gitea Actions jobs with the supported v3 artifact protocol
• make packaged integration consume those exact transferred bytes instead of rebuilding
• on a manually created v* release/tag, wait for lint, typecheck, unit/build validation, package, and external integration before attaching assets
• bind integration and publication to the package job's SHA-256, tag version, and tag commit
• satisfy ADR 0055 by generating and verifying the required corresponding-source archive/checksum, redistribution metadata, and source notice
• refuse replacement or unexpected assets and anonymously read every published asset back byte-for-byte

Verification

• python3 -m unittest -v ci/test_release_assets.py (4 passed)
• bash ci/check-cleanup.sh (19 checks passed)
• pnpm lint
• pnpm typecheck
• pnpm test (22 files, 262 tests)
• pnpm build
• pnpm validate (20 checks)
• canonical package build/checksum verification
• ADR 0055 corresponding-source build and redistribution verification
• full bash ci/integration.sh against the prebuilt canonical pair, including browser UI/display, restart, container recreation, lifecycle, remove/reinstall, and persistence

No release or tag is created or modified by this PR. The release job runs only for a future v* tag and requires an existing release.

## Summary - build the canonical Signage Module Package once and transfer it between Gitea Actions jobs with the supported v3 artifact protocol - make packaged integration consume those exact transferred bytes instead of rebuilding - on a manually created `v*` release/tag, wait for lint, typecheck, unit/build validation, package, and external integration before attaching assets - bind integration and publication to the package job's SHA-256, tag version, and tag commit - satisfy ADR 0055 by generating and verifying the required corresponding-source archive/checksum, redistribution metadata, and source notice - refuse replacement or unexpected assets and anonymously read every published asset back byte-for-byte ## Verification - `python3 -m unittest -v ci/test_release_assets.py` (4 passed) - `bash ci/check-cleanup.sh` (19 checks passed) - `pnpm lint` - `pnpm typecheck` - `pnpm test` (22 files, 262 tests) - `pnpm build` - `pnpm validate` (20 checks) - canonical package build/checksum verification - ADR 0055 corresponding-source build and redistribution verification - full `bash ci/integration.sh` against the prebuilt canonical pair, including browser UI/display, restart, container recreation, lifecycle, remove/reinstall, and persistence No release or tag is created or modified by this PR. The release job runs only for a future `v*` tag and requires an existing release.

ekklesia-bot added 1 commit 2026-10-11 02:17:03 +00:00

ci: publish tested module release assets 844bbcf2f1

Zayin_Admin approved these changes 2026-10-11 03:04:52 +00:00

Zayin_Admin merged commit 8a7e96dd61 into main 2026-10-11 03:05:01 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Zayin_Admin

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

Joey Zayin_Admin ekklesia-bot

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Zayin/Signage#15