spec-sync/.specsync/changes/CHG-0048-prepare-the-specsync-5-1-1-stabilization-release-from-merged-pr-387-bump-accur/state.json at db7b2fb4556cf9628997d5dc338c65968accef81 · CorvidLabs/spec-sync · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
{
  "schema_version": 1,
  "id": "CHG-0048-prepare-the-specsync-5-1-1-stabilization-release-from-merged-pr-387-bump-accur",
  "slug": "prepare-the-specsync-5-1-1-stabilization-release-from-merged-pr-387-bump-accur",
  "title": "Prepare the SpecSync 5.1.1 stabilization release from merged PR #387: bump accurate release metadata and changelog, update the GitHub Action default to 5.1.1, document and validate the floating v5 compatibility ref, verify all release artifacts and supported installation paths, and define fail-closed publication and rollback boundaries",
  "description": "Prepare the SpecSync 5.1.1 stabilization release from merged PR #387: bump accurate release metadata and changelog, update the GitHub Action default to 5.1.1, document and validate the floating v5 compatibility ref, verify all release artifacts and supported installation paths, and define fail-closed publication and rollback boundaries",
  "kind": "operations",
  "state": "accepted",
  "canonical_applied": true,
  "base_commit": "d097bf88a7b057fb3010f9a5881618f48b5ae772",
  "created_at": 1784241482,
  "updated_at": 1784411696,
  "affected_specs": [
    "github"
  ],
  "affected_paths": [
    ".specsync/change-sequence.json",
    "Cargo.toml",
    "Cargo.lock",
    "CHANGELOG.md",
    "action.yml",
    "README.md",
    ".github/workflows/ci.yml",
    ".github/workflows/pages.yml",
    ".github/workflows/trust.yml",
    ".github/scripts/validate-release-version.py",
    ".github/scripts/validate-workflow-runtime-pins.py",
    ".specsync/sdd.json",
    "site/src/content/docs/quickstart.md",
    "site/src/content/docs/integrations/github-action.md",
    "site/src/content/examples/ci-gate.mdx",
    "site/src/content/examples/polyglot.mdx",
    "specs/github/github.spec.md",
    "specs/github/requirements.md",
    "specs/github/context.md",
    "specs/github/tasks.md",
    "specs/github/testing.md"
  ],
  "no_spec_change": false,
  "no_spec_change_rationale": null,
  "acceptance_criteria": [
    "Cargo.toml and Cargo.lock identify specsync 5.1.1 while immutable historical release and archive references remain unchanged",
    "CHANGELOG.md contains an accurate dated 5.1.1 section and comparison links describing the post-5.1.0 lifecycle, performance, security, and Windows portability corrections",
    "The GitHub Action default, pinned README example, Action documentation, packaged-action consumer, and Trust candidate pin consistently identify 5.1.1",
    "Strict specs, complete tests, formatting, Clippy, audit, documentation, release build, packaged Action validation, hosted Linux/macOS/Windows CI, CodeQL, Trust, and provenance verification pass on the exact integrated release candidate before publication",
    "CHG-0043 through CHG-0047 are archived and CHG-0048 is the only active release change before its closing approval",
    "The immutable v5.1.1 tag and GitHub release are created only from integrated main after explicit closing approval, and all five platform archives plus LF-only SHA-256 records are published and verified",
    "The specsync 5.1.1 crate is published to crates.io and a clean cargo install reports 5.1.1",
    "The floating v5 GitHub Action ref is created or advanced only after v5.1.1 assets pass pinned Action smoke tests, and resolves to the same integrated release commit",
    "The CorvidLabs Homebrew formula is updated to 5.1.1 with published checksums and passes formula validation plus a clean install test",
    "Pinned v5.1.1 and floating v5 Action consumers pass supported Linux, macOS, and Windows smoke checks, and publication failures do not rewrite the immutable tag or advance downstream mutable pointers prematurely",
    "Hosted site and VS Code extension jobs use an exact Bun 1.3.14 runtime pin so setup does not depend on GitHub's live Bun-tag discovery API; the pin is exercised by the release PR and integrated-main workflows"
  ],
  "selected_artifacts": [
    "context",
    "requirements",
    "plan",
    "tasks",
    "testing",
    "docs",
    "research",
    "design"
  ],
  "dependencies": [],
  "answers": {
    "architecture_risk": "yes",
    "public_contract": "yes"
  }
}