Skip to content

[codex] Harden release integrity checks#2

Merged
majiayu000 merged 1 commit intomainfrom
codex/release-integrity-checks
Apr 27, 2026
Merged

[codex] Harden release integrity checks#2
majiayu000 merged 1 commit intomainfrom
codex/release-integrity-checks

Conversation

@majiayu000
Copy link
Copy Markdown
Owner

What

Harden the release path before building GitHub release artifacts.

  • Add a release metadata preflight script that checks Cargo.toml, Cargo.lock, tag name, and CHANGELOG alignment.
  • Run release preflight, tests, and cargo publish dry-run before matrix artifact builds.
  • Generate SHA-256 files for release archives.
  • Improve install.sh with VERSION override, optional strict checksum mode, and Windows .exe extraction/install handling.
  • Add the missing 0.2.61 CHANGELOG section and document version-pinned install usage.

Why

The crate version is 0.2.61 while GitHub Releases currently lag behind at v0.2.59. The installer depends on GitHub latest, so release metadata drift can cause users to install a different binary than the crate version suggests.

Validation

  • sh -n install.sh
  • sh -n scripts/check-release.sh
  • GITHUB_REF_NAME=v0.2.61 scripts/check-release.sh
  • cargo test --locked
  • cargo publish --dry-run --locked --allow-dirty

@majiayu000 majiayu000 force-pushed the codex/release-integrity-checks branch from df843c8 to f3e607d Compare April 27, 2026 08:53
@majiayu000 majiayu000 marked this pull request as ready for review April 27, 2026 08:54
@chatgpt-codex-connector
Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@majiayu000 majiayu000 merged commit a0d4c52 into main Apr 27, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant