This repository releases integration artifacts, not application binaries.
The canonical source of truth is the local dist/ payload plus dist/release-manifest.json. GitHub Releases and OCI chart publication are publishing surfaces around that payload.
Each stack release is expected to publish:
mb3r-stack-<version>.tgzmb3r-assets-<version>.tgzstack-manifest.jsoncompatibility-matrix.jsonrelease-manifest.jsonrelease-manifest.schema.jsonrelease-notes.mdSHA256SUMS.txtsbom.cdx.json
- Update
compat/stack-manifest.json. - Update
compat/compatibility-matrix.json. - Confirm upstream release manifests, chart references, and image digests match the chosen Bering and Sheaft releases.
- Confirm dashboard and collector asset versions match the manifest.
- Run:
python -m pip install -r requirements.txt
make validate
make release-dry-run- Review the generated files in
dist/.
The canonical packaging logic lives in scripts/.
GitHub release automation consumes those scripts to:
- package the Helm chart
- package the asset archive
- generate checksums
- generate a CycloneDX SBOM
- publish the chart to an OCI registry
- attach release assets to the tagged release
The chart is intended to be pushed with Helm to an OCI registry:
helm push dist/charts/mb3r-stack-<version>.tgz oci://<registry>/<namespace>/chartsLocal dry runs do not require Helm, but CI installs Helm and performs helm lint plus OCI publication on release tags.