From 4554a74b05db896512f39a729e67ade52c3af802 Mon Sep 17 00:00:00 2001 From: wakemeup Date: Sat, 3 Oct 2026 21:33:56 +0200 Subject: [PATCH] chore(hoolicy): recover unpublished release preparation --- CHANGELOG.md | 10 ---------- README.md | 14 +++++++++++--- VERSION | 2 +- actions/README.md | 2 +- actions/check/action.yml | 2 +- actions/setup/action.yml | 2 +- 6 files changed, 15 insertions(+), 17 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f5800d2..3180e9f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,15 +1,5 @@ # Changelog -## 0.4.1 (2026-10-03) - -### Bug Fixes - -- **hoolicy:** harden policy evaluation and polish CLI workflows (#35) (13b8f61) - -### Other Changes - -- **hoolicy:** add contributor and user agent skills (#34) (95fa1e8) - ## 0.4.0 (2026-09-22) ### Features diff --git a/README.md b/README.md index 3219f8b..614781f 100644 --- a/README.md +++ b/README.md @@ -37,8 +37,8 @@ For unpublished changes, pass the local checkout path instead of Install a release binary, use the container, or build with Go 1.26+: ```sh -go install github.com/openhoo/hoolicy/cmd/hoolicy@v0.4.1 -# or: docker run --rm --user "$(id -u):$(id -g)" -v "$PWD:/work:ro" -w /work ghcr.io/openhoo/hoolicy:v0.4.1 check +go install github.com/openhoo/hoolicy/cmd/hoolicy@v0.4.0 +# or: docker run --rm --user "$(id -u):$(id -g)" -v "$PWD:/work:ro" -w /work ghcr.io/openhoo/hoolicy:v0.4.0 check ``` For rootless Podman, add `--userns=keep-id`. Mapping the caller UID lets the non-root image read private repository files without weakening their host permissions. @@ -149,7 +149,7 @@ Use this repository as a versioned remote pack source: packs: - name: repository git: https://github.com/openhoo/hoolicy.git - ref: v0.4.1 + ref: v0.4.0 subdir: packs/repository with: branch_pattern: '^(feat|fix|chore)/[a-z0-9]+(?:-[a-z0-9]+)*$' @@ -179,4 +179,12 @@ Latest published release remains the version in `VERSION`. Current development s Commits use Conventional Commits and are checked by Hooversion. After successful CI on protected `main`, Hooversion prepares the next release on a release branch and reports a protected release PR; review and merge that PR rather than recreating the release commit manually. The merge's successful CI finalizes the release commit and immutable tag, then the release workflow attaches signed binaries, an SPDX SBOM, provenance, and a signed multi-platform GHCR image. `feat` commits publish a minor release, `fix` and `perf` commits publish a patch release, and breaking changes publish a major release; non-release commits do not publish a version. +When squash-merging a prepared release PR, preserve the generated commit's +subject and body exactly, including the package name in +`chore(release): hoolicy ` and its generated release notes. Supply both +explicitly when merging; a replacement PR description, co-author trailer, or +pull-request number suffix can prevent the pinned Hooversion version from +recognizing the prepared release. Verify the merged message against the prepared +commit before relying on finalization. + Apache-2.0. See [CONTRIBUTING.md](CONTRIBUTING.md) and [SECURITY.md](SECURITY.md). diff --git a/VERSION b/VERSION index 267577d..1d0ba9e 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.4.1 +0.4.0 diff --git a/actions/README.md b/actions/README.md index 68cbb39..f07ece8 100644 --- a/actions/README.md +++ b/actions/README.md @@ -5,7 +5,7 @@ Use immutable action revisions in consuming repositories. ```yaml - uses: openhoo/hoolicy/actions/check@ with: - version: 0.4.1 + version: 0.4.0 ``` `actions/setup` installs a pinned Cosign verifier, downloads the release archive, diff --git a/actions/check/action.yml b/actions/check/action.yml index c2279d1..8f46a6d 100644 --- a/actions/check/action.yml +++ b/actions/check/action.yml @@ -4,7 +4,7 @@ inputs: version: description: Hoolicy release version to install. required: false - default: "0.4.1" + default: "0.4.0" executable: description: Optional Hoolicy executable path; skips release installation when set. required: false diff --git a/actions/setup/action.yml b/actions/setup/action.yml index dee96eb..7d59e5d 100644 --- a/actions/setup/action.yml +++ b/actions/setup/action.yml @@ -4,7 +4,7 @@ inputs: version: description: Hoolicy release version to install. required: false - default: "0.4.1" + default: "0.4.0" outputs: version: description: Hoolicy version configured by this action.