frankenbit/release-toolkit
frankenbit/release-toolkit
15
1
Fork 0
Code Issues 11 Pull requests Projects Releases 106 Packages 1 Wiki Activity Actions
106 releases 124 tags
  • v0.59.0 23b8dee5ea

    v0.59.0 Stable

    release-bot released this 2026-09-06 00:47:35 +02:00 | 263 commits to main since this release

    Added

    • dispatch-check: diagnose whether a commit was reported and dispatched (#1110).

    Changed

    None.

    Fixed

    • release: a tag with no .goreleaser.yaml is now named as such, not reported as a config that parses (#1194).
    • docs: document the lockstep artifact set contributors check when adding a CLI verb (#1196).
    • release: a rebuild derives the asset set from the tag's own config, not from today's (#1197).
    • gates: base-divergence-check no longer reports "behind base" from the cached merge_base alone (#1202).
    • release cut: rt bake-digest refuses the all-zeros placeholder instead of baking it into a published action (#1205).
    • docs: the integration guide names v0.57.0 as the earliest tag a gitea.com adopter can pin (#1206)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Downloads
  • v0.58.0 287b412f8b

    v0.58.0 Stable

    release-bot released this 2026-09-05 21:49:45 +02:00 | 275 commits to main since this release

    Added

    • release: refuse a merge whose CI base is not the base it lands on (#1149)
    • release: refuse a branch sitting on a prepared-but-uncut release (#1174)

    Changed

    None.

    Fixed

    • release: a mixed safeguard verdict is reported as the refusal it is (#1172)
    • bake: reusable-recover-pending-cut.yml is repinned like every other marker-carrying workflow (#1173)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Downloads
  • v0.57.4 4c4c5c6578

    v0.57.4 Stable

    release-bot released this 2026-09-05 20:40:11 +02:00 | 289 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • release: the release PR is actually routed for review (#620)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Downloads
  • v0.57.3 cd523bde89

    v0.57.3 Stable

    release-bot released this 2026-09-05 05:25:26 +02:00 | 294 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • recover-pending-cut: default-branch settings and repository hints now reach the recovery PR callsite (#1160).
    • recover-pending-cut: restores the source fragments consumed by an interrupted prepare, so the next re-prepare passes fragment coverage (#1166)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Downloads
  • v0.57.2 147035e137

    v0.57.2 Stable

    release-bot released this 2026-09-05 04:57:04 +02:00 | 299 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • dead-script ledger: uses stable anchors and records the 16 remediations (#1119, #1111)
    • decide: a Layer-2 lookup that could not complete no longer renders as a refusal of the prepare commit (#1126).
    • recover-pending-cut: the recovery workflow now opens its PR instead of failing after the push (#1153)
    • twins: the .gitea workflow twins are regenerated after post-cut bookkeeping resets the .forgejo bake markers, so main no longer carries drift that every subsequent PR inherits (#1163).
    • rt prep: regenerates the .gitea twins after the bake and stages them, so a prepare commit is no longer twin-dirty (#1163)
    • post-cut: bake-marker resets and rt build-bake now regenerate the .gitea twins, closing the two callers #1175 left (#1163).

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • contract-paths-check: pin the seven intentionally uncovered contract files by name, so adding an ungraded document fails the PR gate instead of growing a passing log silently (#1121).
    Downloads
  • v0.57.1 953c53cc15

    v0.57.1 Stable

    release-bot released this 2026-09-05 03:24:27 +02:00 | 316 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • wrappers: Discover preserves directory read errors, distinguishing unreachable paths from readable directories with no matching wrappers (#1084)
    • release: the goreleaser workflow builds the pipeline rt before the step that runs it (#1112)
    • fragment-check: the optional coverage control now protects the complete skip disclosure, including its required-mode remedy (#1145)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • ci: regenerate the .gitea workflow twins left stale by the v0.57.0 post-cut bookkeeping (#1112)
    Downloads
  • v0.57.0 8c647b4559

    v0.57.0 Stable

    release-bot released this 2026-09-05 01:49:23 +02:00 | 327 commits to main since this release

    Added

    • distribution: a public push mirror on gitea.com, and what it does not carry (#1021)
    • mirror: releases and their assets can be published to another forge (#1030)
    • multi-forge: a generated .gitea/workflows/ twin, behind a drift gate (#1092)
    • auth: an opt-in split credential pair — a deploy key for git, a narrow PAT for the API (#1094)
    • recovery: rt recover-pending-cut folds an interrupted cut's stranded section back under [Unreleased] (#1130)
    • recovery: an adopter can recover an interrupted cut without local tooling (#1135)
    • config: pyproject.toml and Cargo.toml work as version files (#337)
    • release: route the release PR for review when it is created (#620)

    Changed

    • post-cut: an absent manifest is now graded from the repository rather than assumed (#1019). It refuses only when an existing tag's tree carries a manifest, so a first cut on an already-tagged project still proceeds

    • post-cut: an absent manifest is graded from the repository, not assumed (#1019)

    • manifest-check: several refusals now name the repair, not just the discrepancy (#1077)

    • internal: the fork approval notice moved from bash into rt (#1113)

    Fixed

    • post-cut: an unreadable config no longer defaults the tag probe to v* (#1019)

    • operations: document the merge-time stamp convention for regenerated rolling PRs (#770)

    • release: the bake unwinds prior digest pins and refuses a tag move the gate would reject (#980)

    • release: the bake's pipeline checkout now resolves in the job that uses it (#980)

    • release: a rebuild no longer stacks a digest-pin commit on the previous one (#980)

    • release: the bake builds its pipeline rt in a container, not on the runner (#980)

    • mirror: the backfill dispatch runs, and its reruns change nothing (#1087)

    • docs: the C5 contract states the exclusion rule and lists all ten verbs (#1095)

    • fragment-check: local runs explicitly report when PR fragment coverage is skipped instead of silently passing that dimension (#1098)

    • mirror: the published .gitea twins carry the fixes their sources already had (#1102)

    • docs: the README's mirror snapshot describes the mirror as it is (#1105)

    • docs: the C5 exclusion section no longer contradicts its own table (#1106)

    • cli: a rejected flag or argument now names itself and exits 2 instead of exiting silently (#1123)

    • decide: the documented recovery for an interrupted cut now terminates (#1128)

    • register-check: refuse explicitly requested paths that resolve to nothing (#1132)

    • recovery: a second stranded cut is no longer silent (#1138)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Security

    • release: publish the minisign public key adopters verify releases with (#1062)

    • security: a post_bump_hook no longer receives the workflow's push credentials under tier 3 (#1106)

    Internal

    • release dispatch guard: keep fire-cut reachability independent of cut_gate (#1065)

    • release cut: the post-condition guard is fail-closed and the defer path is simulated in CI (#1057).

    • integration guide: name the two Actions-variable namespaces and which side of the bridge line to create (#1067)

    • release checks: manifest-check and post-cut now share toolkit-self detection (#1079)

    • integration guide: state which TOML layouts the version-file strategies actually support (#1088)

    • gitea-twin: the drift refusal names each source's last commit (#1103)

    • release-assets: the asset preparation moves from bash into rt (#1112)

    • ci: contract-paths-check.sh is wired into CI — it had no caller anywhere (#1114)

    • architecture docs: state which shell survives the Go port and the test that decides it (#1115)

    • constraints: TC-4 now names Go rt as the release-engine substrate and bounds the measured shell residuals (#1118)

    • tests: fold register-check into the unknown-flag census arm (#1132)

    • docs: the v1.0.0 stability contract names what it does NOT cover, and is linked from README + the integration guide (#338)

    • docs: four illustrative/hypothetical/historical @vX.Y.Z pins are now marked and guarded (#968)

    Downloads
  • v0.56.1 3fea6abfed

    v0.56.1 Stable

    release-bot released this 2026-08-30 00:08:13 +02:00 | 442 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • release cut: a deferring caller no longer fails its own job for deferring (#1057).

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Security

    • release bootstrap: authenticate checksum manifests before using release assets (#513)

    Internal

    • fetch-rt: the sign-in comments cite the tracked history instead of asserting around it (#1020).
    Downloads
  • v0.56.0 a6c31a3877

    v0.56.0 Stable

    release-bot released this 2026-08-28 22:15:12 +02:00 | 447 commits to main since this release

    Added

    • rt: pre-push runs the locally-runnable required gates (#1037)
    • pre-push: go-ci is graded locally, and both lint invocations are uncapped (#1046)

    Changed

    None.

    Fixed

    • fragment-check: a PR that deletes a fragment and adds none no longer passes coverage (#1033)
    • release caller: the cut's concurrency group is no longer claimed by pushes that are not cuts (#1038).
    • fragment-check: the rolling cut PR no longer fails coverage (#1051)
    • register-check: ignore compact option clusters at a punctuation boundary while preserving word-boundary matching (#897)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • fetch-rt: the sign-in-page guard no longer names a forge that does not have the setting (#1020).
    • workflows.bats: add a regression guard for release.yml's concurrency block (#1032)
    • fragment-check: the unknown-change-set branch is covered in isolation (#1036)
    • workflow tests: the cut-workflow integration arm records its discriminating mutation (#1038).
    • integration docs: fix a stale adoption-decision record that described the design #735 replaced (#735)
    Downloads
  • v0.55.0 78df2efd0a

    v0.55.0 Stable

    release-bot released this 2026-08-28 17:06:12 +02:00 | 473 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • post-cut: a manifest created from scratch seeds the legacy schema (#1019)
    • release: a half-completed cut can be finished without deleting published assets (#1024)
    • fragment-check: the changed-fragment set is computed from the merge base (#1028)
    • fragment-check: density refuses only on fragments this PR touched (#735)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • release-assets: record why the checksum lookup is safe, at the line that makes it so (#1024)
    • release workflow: record that the concurrency: guard must stay on the caller (#595)
    Downloads