Automate releases with GitHub Actions and repogen package publishing - #17
Merged
Conversation
added 8 commits
January 21, 2026 18:30
… upsun Also, ensure snapshots contain needed package files
akalipetis
had a problem deploying
to
production
January 22, 2026 15:50 — with 
GitHub Actions
Failure
GitHub Actions
Failure
akalipetis
had a problem deploying
to
production
January 22, 2026 15:52 — with
GitHub Actions
Failure
GitHub Actions
Failure
Contributor
There was a problem hiding this comment.
Pull request overview
This pull request automates the release process by introducing GitHub Actions workflows and migrating from Cloudsmith to self-hosted S3-based package repositories using the repogen tool. The changes enable automated building, signing, and publishing of packages (APK, DEB, RPM) for both Platform.sh and Upsun CLIs.
Changes:
- Added GitHub Actions workflow to automate releases on tag push with package building and signing
- Introduced
repogen.shscript to manage S3-based package repositories replacing Cloudsmith - Updated installer to use new repository URLs at repositories.upsun.com instead of Cloudsmith
- Made installer POSIX-compatible by changing shebang from bash to sh with associated syntax updates
- Added package signing configuration for APK and RPM packages in goreleaser
Reviewed changes
Copilot reviewed 6 out of 6 changed files in this pull request and generated 12 comments.
Show a summary per file
| File | Description |
|---|---|
.github/workflows/release.yml |
New workflow automating release builds, signing, and repository publishing |
repogen.sh |
Script to upload signed packages to S3 repositories for Debian, RPM, and Alpine |
installer.sh |
Updated to use S3 repositories and converted to POSIX sh compatibility |
.goreleaser.yaml |
Added APK/RPM signing configuration and file name templates |
Makefile |
Added signing key validation for snapshot and release targets |
README.md |
Updated release documentation to reflect automated workflow |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
akalipetis
had a problem deploying
to
production
January 22, 2026 16:19 — with
GitHub Actions
Failure
GitHub Actions
Failure
akalipetis
had a problem deploying
to
production
January 22, 2026 16:27 — with
GitHub Actions
Failure
GitHub Actions
Failure
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
pjcdawkins
reviewed
Feb 2, 2026
pjcdawkins
reviewed
Feb 2, 2026
Security fixes: - Quote shell variables in installer.sh to prevent word splitting - Use glob instead of ls parsing for VERSION detection in repogen.sh - Use mktemp for signing key files instead of predictable /tmp paths - Set chmod 600 on key files in release workflow - Use temporary GNUPGHOME to avoid polluting user's keyring Code quality fixes: - Fix Platform.sh homebrew upgrade URL in release notes - Update brews/scoops repository owner from platformsh to upsun - Remove unsupported VENDOR=platformsh documentation - Add package count validation in repogen.sh - Make FEDORA_VERSIONS configurable via environment variable - Add VERSION format validation with semver warning - Update yum to dnf in README for modern RHEL/Fedora Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
repogen.shscript for uploading packages to S3 repositories (APK, DEB, RPM)