Skip to content

fix(release): exclude Maven project local repository from evidence - #24

Merged
youngledo merged 1 commit into
mainfrom
codex/fix-release-evidence-selection
Aug 2, 2026
Merged

fix(release): exclude Maven project local repository from evidence#24
youngledo merged 1 commit into
mainfrom
codex/fix-release-evidence-selection

Conversation

@youngledo

Copy link
Copy Markdown
Contributor

Summary

  • exclude Maven 4 project-local repository caches from release evidence collection
  • preserve artifact, signature, and SBOM evidence from module targets
  • add workflow verifier regression coverage

Verification

  • bash scripts/verify-release-workflow-test.sh
  • bash scripts/verify-consumer-pom-test.sh
  • git diff --check

Maven Central staging completed successfully for v1.0.0; the preceding Release run failed only while copying evidence because a cache-derived path exceeded the filesystem name limit.

@youngledo
youngledo merged commit b7989c3 into main Aug 2, 2026
19 checks passed
@youngledo
youngledo deleted the codex/fix-release-evidence-selection branch August 2, 2026 06:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant