Skip to content

fix: create draft release source tags explicitly - #12

Merged
cristibleotiu merged 1 commit into
mainfrom
fix/r1-meshdb-draft-release-tag
Aug 19, 2026
Merged

fix: create draft release source tags explicitly#12
cristibleotiu merged 1 commit into
mainfrom
fix/r1-meshdb-draft-release-tag

Conversation

@cristibleotiu

Copy link
Copy Markdown
Contributor

What changed

  • explicitly create the immutable source ref after creating a resumable draft release
  • recover a matching draft release whose tag was not yet created
  • reject missing/published/mismatched release and tag states fail-closed
  • add a draft lifecycle contract and refresh the source manifest

Root cause

Release run 32216391674 passed signing, attestations, GitHub verification, and anonymous pull. It then created a draft release, but gh release create --draft did not publish refs/tags/v1.0.0; the immediate fetch therefore failed with exit 128.

Validation

  • 83 release, SBOM, Cloudflare allocation, and cleanup-recovery tests
  • source boundary, 11,950-file license inventory, provenance, fixtures, VEX, source manifest, Bash, and actionlint checks
  • two local adversarial reviews of partial-failure recovery, SHA binding, concurrency, permissions, and publication order
  • GPT-5.5 subagents remain unavailable because the workspace is out of credits

No image/runtime, database, signing, attestation, or Cloudflare behavior changes.

What changed:
- create the immutable source ref through the GitHub API after draft creation
- recover matching draft releases that do not yet have a tag
- add regression coverage and refresh the source manifest

Why:
- GitHub draft releases do not publish their target tag automatically
@cristibleotiu
cristibleotiu marked this pull request as ready for review August 19, 2026 06:12
@cristibleotiu
cristibleotiu merged commit 1a9d394 into main Aug 19, 2026
1 check passed
@cristibleotiu
cristibleotiu deleted the fix/r1-meshdb-draft-release-tag branch August 19, 2026 06:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant