Skip to content

ci: pin install-script smoke to signed N-1 tag - #8

Merged
3leapsdave merged 2 commits into
mainfrom
fix/ci-install-smoke-pin-signed-tag
Jul 29, 2026
Merged

ci: pin install-script smoke to signed N-1 tag#8
3leapsdave merged 2 commits into
mainfrom
fix/ci-install-smoke-pin-signed-tag

Conversation

@3leapsdave

@3leapsdave 3leapsdave commented Jul 29, 2026

Copy link
Copy Markdown
Member

Summary

Fixes main CI failing after each release tag: install-sfetch.sh --dry-run was following latest, which can resolve to a just-created release before platform archives finish uploading (HTTP 404).

Change

  • CI install smoke now reads SFETCH_VERSION from the Makefile (N-1 fully signed pin) and runs:
    bash scripts/install-sfetch.sh --dry-run --tag <pin> --require-minisign
  • Document that Makefile SFETCH_VERSION is shared by bootstrap and this smoke test; advance after each signed publish.

3leapsdave and others added 2 commits July 29, 2026 15:45
Main CI dry-run followed latest and 404'd when a just-tagged release
still lacked platform archives. Read SFETCH_VERSION from the Makefile
and pass --tag plus --require-minisign so the smoke test only exercises
a fully signed published cut.

Role: devlead

Generated by Grok 4.5 (https://x.ai) running Grok Build (https://x.ai) under supervision of [@3leapsdave](https://github.com/3leapsdave)

Co-Authored-By: Grok 4.5 <noreply@3leaps.net>
Committer-of-Record: Dave Thompson <dave@3leaps.net> [@3leapsdave]
Shell-parsing Makefile assignment is brittle across assignment forms and
version shapes. Add print-sfetch-version and have CI call make so the pin
is expanded by make for any patch/minor/major tag value.

Role: devlead

Generated by Grok 4.5 (https://x.ai) running Grok Build (https://x.ai) under supervision of [@3leapsdave](https://github.com/3leapsdave)

Co-Authored-By: Grok 4.5 <noreply@3leaps.net>
Committer-of-Record: Dave Thompson <dave@3leaps.net> [@3leapsdave]
@3leapsdave
3leapsdave merged commit 9042bff into main Jul 29, 2026
4 checks passed
@3leapsdave
3leapsdave deleted the fix/ci-install-smoke-pin-signed-tag branch July 29, 2026 19:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant