Repository navigation
ci: adopt validated minimal EDB installer pin for PG14–18 - #10
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PG14–18 minimal EDB installer: operator-authorized fleet rollout
One-file, one-line change: pin reusable
pgextwin/build/.github/workflows/build-extension.ymlfrom455f0ccc667697f600700a6e64bcfd6c57b6a977to4adc71076283dc9cf64543b760c65b054f5a85f0(accepted pilot plpgsql_check #43; shared builder build #110). This excludes pgAdmin/StackBuilder from EDB installation; preserves pinned PostgreSQL version, bounded Chocolatey retry, strict exit-code/headers/import-lib checks.Gate before merge: exact PR head/base, protected main required
Windows required summaryfrom App15368 SUCCESS, PG14–18 Windows jobs and extension functional smoke SUCCESS, five actual newly generated PR-run Artifacts independently checked for outer/inner ZIP CRC, SHA256 vs SPDX2.3 SBOM-listed file hashes, Grype JSON and applicable policy, PACKAGE-INFO exact Run/ref/builder pin, proper package contents. Measure installer phase separate from external EDB download; report PG17 download outliers without bypassing any required test. Expected-head squash only after full PASS, and independent postmerge CI/Artifact audit afterwards. Any failed CI/integrity STOP; incomplete HOLD.Existing unrelated candidate/Grype PRs are untouched. Manual Dispatch, signing, Publisher, Release, Tag, settings, Secrets, budget and branch-protection edits prohibited. Tracks Issue #46 and Issue #75.