Skip to content

Conversation

@jamestelfer
Copy link
Member

@jamestelfer jamestelfer commented Jan 5, 2026

Purpose

Simplify and consolidate the cfparams release process by removing the dependency on GitHub Actions and AWS Secrets Manager. The current hybrid approach requires Buildkite to trigger GitHub Actions, which then performs the actual release work. This is complicated and relies on long-lived credentials stored in AWS Secrets Manager.

Going for a Buildkite-only pipeline with Chinmina for ephemeral GitHub authentication makes the release process more straightforward.

Notably:

  1. Chinmina provides short-lived tokens scoped to specific operations, eliminating the need to manage and rotate secrets in AWS Secrets Manager.
  2. git-cliff works better for pre-release versions than our previous strategy, and gets rid of a Node dependency.

Context

@jamestelfer jamestelfer force-pushed the migrate-release-to-buildkite-chinmina branch from 6e28768 to 0061686 Compare January 9, 2026 06:02
In preparation for a full migration of the release
process to Buildkite.
@jamestelfer jamestelfer force-pushed the migrate-release-to-buildkite-chinmina branch 3 times, most recently from 393d86b to 8f943af Compare January 10, 2026 12:33
Replace the hybrid Buildkite/GitHub Actions release workflow with a
Buildkite-only pipeline using Chinmina for ephemeral GitHub authentication.

The release process is entirely in Buildkite, and no longer requires
GitHub personal access tokens.
@jamestelfer jamestelfer force-pushed the migrate-release-to-buildkite-chinmina branch 3 times, most recently from 531360b to 2b2db5b Compare January 10, 2026 12:54
Add release section to goreleaser config to ensure changelog is
properly published to GitHub releases with appropriate header and
footer formatting.
- Change snapshot.name_template to snapshot.version_template
- Change archives.format to archives.formats
- Rename brews to homebrew_casks (removes custom test and install
  scripts as casks use a different structure)

These changes address all deprecation warnings from GoReleaser v2.
@jamestelfer jamestelfer force-pushed the migrate-release-to-buildkite-chinmina branch from 2b2db5b to 06d314b Compare January 10, 2026 13:02
@jamestelfer jamestelfer changed the title Migrate release process from GitHub Actions to Buildkite with Chinmina ci: migrate release process from GitHub Actions to Buildkite with Chinmina Jan 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants