Skip to content

fix(release): bind protected channel secrets#174

Merged
shideneyu merged 1 commit into
mainfrom
fix/release-channel-recovery
Jul 24, 2026
Merged

fix(release): bind protected channel secrets#174
shideneyu merged 1 commit into
mainfrom
fix/release-channel-recovery

Conversation

@shideneyu

@shideneyu shideneyu commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

Summary

  • declare each protected environment secret on its reusable channel worker
  • distinguish an absent crates.io version from a denied artifact download
  • preserve explicit one-hop secret boundaries and all existing release gates
  • add contract and regression coverage

Validation

  • python3 scripts/release/validate-contracts.py
  • cargo test --locked --test release_downstream_workflows_spec --test release_automation_spec --test release_downstream_result_evidence_spec
  • cargo fmt --all -- --check
  • ruff check scripts/release/publish-crate-set.py scripts/release/downstream_workflow_contract.py
  • YAML parse and git diff --check

@shideneyu
shideneyu force-pushed the fix/release-channel-recovery branch from 5c6f856 to db1126a Compare July 24, 2026 17:43
@shideneyu shideneyu changed the title fix(release): add exact channel recovery fix(release): bind protected channel secrets Jul 24, 2026
@shideneyu
shideneyu force-pushed the fix/release-channel-recovery branch 3 times, most recently from 2abd6e5 to 2f2da33 Compare July 24, 2026 17:55
@shideneyu
shideneyu force-pushed the fix/release-channel-recovery branch from 2f2da33 to 2b6e108 Compare July 24, 2026 18:14
@shideneyu
shideneyu merged commit dcb00d5 into main Jul 24, 2026
52 checks passed
@shideneyu
shideneyu deleted the fix/release-channel-recovery branch July 24, 2026 18:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant