frankenbit/release-toolkit
frankenbit/release-toolkit
Watch
17
1
Fork
You've already forked release-toolkit
 0
Code Issues 39 Pull requests Projects Releases 112 Packages 1 Wiki Activity Actions
112 releases 130 tags
  • v0.62.2 ab167b99fb

    v0.62.2 Stable

    release-bot released this 2026-09-07 02:30:33 +02:00 | 207 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • examples: the drop-in workflows now resolve as copied (#1402)
    • README: the Status section names one version, and it is the only kind that stays true (#1403)
    • docs: the positioning describes the access model we have, and two false visibility claims are corrected (#1404)
    • docs: every git.frankenbit.de link in the adopter-facing docs resolves for a public reader, and a check fetches them (#1414)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • internal: the mirror caller's header no longer claims a caller that does not exist (#1392).
    • internal: prepare no longer writes to README.md (#1411).
    • conventions: a link from a CHANGELOG entry into the tree must pin a commit, not a branch (#1417)
    Downloads
  • v0.62.1 17022c3ad5

    v0.62.1 Stable

    release-bot released this 2026-09-06 23:42:45 +02:00 | 224 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    None.

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • internal: the adopter-pin PR is now opened by a credential that lets it be graded (#1393).
    • internal: the adopter-pin PR can now pass the repo's own required gates (#1394).
    Downloads
  • v0.62.0 b6b5208bde

    v0.62.0 Stable

    release-bot released this 2026-09-06 22:10:37 +02:00 | 230 commits to main since this release

    Added

    • gates: preflight-push-whitelist grades a split-pair deploy-key push instead of always warning (#1105).
    • adopters: a dispatch exercises rt adopter-preflight from a gitea.com consumer (#1259).
    • gates: base divergence now reports a pull-request status for merge readiness (#1275)
    • new check: rt review-eligibility reports whether the authenticated reviewer's approval counts (#1277)
    • ci: post-merge Go failures page the landing PR with both adjacent commits (#1278)
    • new gate: refuse a v1.0.0 cut while ADR-0001 still reads accepted (#1292)
    • ci: records the commit an official review named beside the object Forgejo lands after replay (#1299)
    • gates: rt cut-fragment-coverage-check refuses a cut that leaves a fragment on its base (#1305)
    • new check: rt cancelled-context-check distinguishes a cancelled task from a genuine refusal on a failing status context (#1309)
    • new check: pre-push grades its local-gate table against the live required-context set (#1327)
    • adoption: rt readme-pin-check grades the README's version pins against the mirror (#1345).
    • security: a SHA-pinned consumer's second checkout now resolves through that SHA (#336)

    Changed

    • PR CI: gates build the tree a PR will land on, not the tree it was pushed as (#1195).
    • PR CI: the landing-tree replay names the base SHA it graded and what it does not cover (#1195).

    Fixed

    • adoption: the README named a version the mirror cannot serve (#1068).
    • adopter-preflight-probe: the run's verdict is now readable after the fact (#1259).
    • release checks: marker counts and value grading now stay aligned over canonical baked workflows (#1267).
    • tests: the second hook-credential scan gets the same sentinels and pre-assertion (#1295).
    • base-divergence-check: the PASS line names the base SHA it graded and says the status does not re-run when the base moves (#1307).
    • gates: the push preflights no longer pass when direct push is disabled entirely (#1313).
    • integration guide: the org-scope runner check is not 2xx, not == 403 (#1317)
    • README + integration guide: the uses: line depends on where the toolkit lives (#1321)
    • ci: the shared-tree guard refused to grade an unreadable outcome instead of waving it through (#1323)
    • pre-push: the declaration list is graded against the required set, so a dead entry cannot hide a gap (#1333)
    • review-eligibility: an unreported approval-whitelist flag is could-not-grade, not disabled (#1342)
    • gates: mirror-drift-check's red now reaches someone, and its two modes stay apart (#1348).
    • docs: the Quick start names the forge axis, so a Gitea adopter is not sent to .forgejo/ (#1350).
    • gates: prepared-uncut-check tells manifest drift from an uncut release (#1356).
    • release-state: the manifest still named v0.61.0 after v0.61.1 was cut (#1356).
    • adopters: rt adopter-preflight exits 2 when it could read nothing at all (#1357).
    • build-ref-check: names a runner label that exists, so the workflow can actually run (#1361).
    • forgejo: the shared pagination walk stops only on an empty page (#1374)
    • adopter-preflight: grades runners on Gitea, where the shapes differ in two places (#1374)
    • ci: every runs-on job carries a timeout-minutes bound, and a gate refuses a workflow that drops one (#1375)
    • adoption: the README's adopter pins are set by the mirror, not by the cut (#1378).
    • docs: identify base-divergence-check as an advisory pull-request workflow gate (#1381)
    • adoption: the pin gate grades the integration guide and the examples too (#1382).
    • forgejo: a forge that repeats pages is no longer reported as a large one (#1385)
    • release decision: manifest-free prerelease bootstrap now follows the detected tag lineage (#623).

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • ci: the consolidated gate job now attests that its nine gate steps actually ran (#1253).
    • ci: the five per-workflow toolkit-self gate jobs are removed (#1253).
    • ci: the consolidated gate job now enforces that its nine gates leave the shared tree alone (#1253).
    • Post-merge pager: pin transport and malformed-response refusals in the shell PR lookup. (#1301)
    • Forgejo reads: pin transport failures and malformed merge-SHA lookup responses as refusals instead of silent no-PR fallbacks. (#1301)
    • base-divergence-check: an arm executes the grading step's rc contract, so removing pipefail reddens (#1306).
    • base-divergence-check: the advisory-not-required decision is recorded in the verb's own doc comment (#1312).
    • internal: pre-push's local-gate table drops a context retired by #1320 (#1322).
    • pre-push: runPrePush's exit-status decisions are pinned (#1335).
    • tests: the tag-truncation control's fixture now models the hazard, so a tag assertion carries it (#1364)
    • internal: add an exact-head review submit gate and document the HOLD convention (#1383)
    • ci: the gitea wire probe settles paging without assuming a stable row order (#1374)
    Downloads
  • v0.61.1 5cf2067e99

    v0.61.1
    Some checks failed
    release / decide + act (push) Successful in 8s
    Details
    release / release (push) Successful in 0s
    Details
    tests / workflow-schema (push) Successful in 5s
    Details
    tests / dated-examples (push) Successful in 4s
    Details
    tests / contract-paths (push) Successful in 4s
    Details
    gitea-twin-check / check (push) Successful in 26s
    Details
    check-self-bootstrap / check (push) Successful in 27s
    Details
    release / fire-cut (push) Successful in 2s
    Details
    prepared-uncut-check / toolkit-self prepared-uncut controls (push) Successful in 27s
    Details
    tests / shellcheck (push) Successful in 22s
    Details
    prepared-uncut-check / prepared-but-uncut release (push) Successful in 52s
    Details
    prepared-uncut-check / check (push) Successful in 0s
    Details
    go-ci / lint + build + test (push) Successful in 1m8s
    Details
    tests / bats (push) Has been cancelled
    Details
    mirror drift check / check (release) Failing after 7s
    Details
    goreleaser / build + publish rt asset (push) Successful in 1m6s
    Details
    goreleaser / the release actually holds its assets (push) Successful in 15s
    Details
    goreleaser / publish the rt image + bake its digest (push) Failing after 24s
    Details
    goreleaser / adopters can pull the published image (push) Has been skipped
    Details
    goreleaser / adopters can fetch the published asset (push) Has been skipped
    Details
    build-ref-check / check (push) Has been cancelled
    Details
    Stable

    release-bot released this 2026-09-06 12:42:09 +02:00 | 330 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • tests: the tier-3 hook-credential leak scan no longer fails on a branch name (#1295).

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • ci: the five duplicated toolkit-self gate jobs are consolidated into one (#1253).
    • versioning policy: the stale "latest release" literal is gone, and the rule replacing it is stated once (#1283)
    Downloads
  • v0.61.0 e3cfb57e03

    v0.61.0 Stable

    release-bot released this 2026-09-06 12:22:01 +02:00 | 339 commits to main since this release

    Added

    • release: rt status-context-check refuses an unclassified posted context (#1177)
    • cli: rt adopter-preflight reports every missing adopter prerequisite in one run (#1236).

    Changed

    None.

    Fixed

    • forgejo: the lenient pagination helper is retired, and the unpublished-draft check now pages to completion (#1256).
    • release checks: build-ref accounting now reports present files with unrecognised markers. (#1268)
    • build-ref-check: distinguish a missing local tag from an unbaked tagged tree (#1273)
    • release: status-context-check grades a PR head, not a push one (#1287, #1289)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • integration guide: version instructions mean release tags only, stated once (#1248)
    Downloads
  • v0.60.0 7d5a704a08

    v0.60.0 Stable

    release-bot released this 2026-09-06 11:38:29 +02:00 | 358 commits to main since this release

    Added

    • gates: rt prep-order-check refuses a PR that stacks a release-relevant commit above its prepare commit (#1170).
    • docs: name how to read a failed Actions run's step output on this Forgejo (#1198)
    • release: an unmirrored gitea.com release is now detectable (#1212)
    • release cut: rt build-ref-check refuses a tagged tree that does not carry its own tag (#1214).
    • release: a caller missing secrets: inherit is now reported, not silent (#1258)

    Changed

    • adopter gate: the prepared-but-uncut check is reusable with push and daily-schedule wiring, and its .gitea twin is generated alongside the Forgejo source (#1200).

    Fixed

    • dispatch-check: distinguish dispatch lag from a stalled task registration (#1110).
    • release cut: the Baker now stages .gitea twins alongside the sources it bakes (#1180).
    • release prep: blocked rolling PRs now announce deadlocks (#1183)
    • tests: Go now asserts the bake and staging workflow populations stay aligned (#1201).
    • release: an unrouted release PR now says so on the PR itself, not only the job log (#1204)
    • ac-closure-check: refusals now explain that fixing a referenced issue needs a PR touch to refresh the status (#1211).
    • workflow ref resolution: the caller fallback now accepts absolute provider URLs and display-cased frankenbit/release-toolkit wrapper paths when a reusable's baked marker is absent or still the placeholder (#1222).
    • gates: PRCommitSHAs and PRCommitMessages now paginate, and refuse a malformed page (#1223).
    • ci: preserve refusal and could-not-grade diagnostics at gate boundaries (#1226)
    • dispatch-check: read the complete Forgejo Actions task feed before grading a commit (#1227).
    • release prep: repeated rolling-PR deadlock notices are deduplicated by blocker set (#1231)
    • release: a failed asset publish can no longer emit silence, and an empty release is returned to draft (#1232).
    • release: the goreleaser config guard now reads its tool's output under ANSI colour (#1233).
    • rolling PR: an unsubmitted review draft no longer clears a live REQUEST_CHANGES (#1235).
    • rolling PR: only a submitted verdict can clear a live REQUEST_CHANGES (#1246).
    • bake: internal/bake compiles again after two PRs exported the same accessor (#1270).

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • contributor docs: name the three artifacts a new CLI verb touches (#1196)
    • integration guide: name the twelve published tags whose image digest was never rewritten (#1210)
    • integration guide: name the symptom of a missing runner (#1229)
    • gates: the assets-present job's release-keyed decision and its could-not-grade refusal now have behavioural arms (#1257).
    • contributor guide: a fixture needing a version-shaped tag cannot live in this repo (#1262)
    • release: NeedsSecrets is now derived-and-asserted, not just hand-maintained (#1269)
    Downloads
  • v0.59.0 23b8dee5ea

    v0.59.0 Stable

    release-bot released this 2026-09-06 00:47:35 +02:00 | 411 commits to main since this release

    Added

    • dispatch-check: diagnose whether a commit was reported and dispatched (#1110).

    Changed

    None.

    Fixed

    • release: a tag with no .goreleaser.yaml is now named as such, not reported as a config that parses (#1194).
    • docs: document the lockstep artifact set contributors check when adding a CLI verb (#1196).
    • release: a rebuild derives the asset set from the tag's own config, not from today's (#1197).
    • gates: base-divergence-check no longer reports "behind base" from the cached merge_base alone (#1202).
    • release cut: rt bake-digest refuses the all-zeros placeholder instead of baking it into a published action (#1205).
    • docs: the integration guide names v0.57.0 as the earliest tag a gitea.com adopter can pin (#1206)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Downloads
  • v0.58.0 287b412f8b

    v0.58.0 Stable

    release-bot released this 2026-09-05 21:49:45 +02:00 | 423 commits to main since this release

    Added

    • release: refuse a merge whose CI base is not the base it lands on (#1149)
    • release: refuse a branch sitting on a prepared-but-uncut release (#1174)

    Changed

    None.

    Fixed

    • release: a mixed safeguard verdict is reported as the refusal it is (#1172)
    • bake: reusable-recover-pending-cut.yml is repinned like every other marker-carrying workflow (#1173)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Downloads
  • v0.57.4 4c4c5c6578

    v0.57.4 Stable

    release-bot released this 2026-09-05 20:40:11 +02:00 | 437 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • release: the release PR is actually routed for review (#620)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Downloads
  • v0.57.3 cd523bde89

    v0.57.3 Stable

    release-bot released this 2026-09-05 05:25:26 +02:00 | 442 commits to main since this release

    Added

    None.

    Changed

    None.

    Fixed

    • recover-pending-cut: default-branch settings and repository hints now reach the recovery PR callsite (#1160).
    • recover-pending-cut: restores the source fragments consumed by an interrupted prepare, so the next re-prepare passes fragment coverage (#1166)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Downloads