Skip to content

fix(release): verify publication evidence reliably - #350

Merged
tbitcs merged 1 commit into
mainfrom
release/0.23.3
Jul 19, 2026
Merged

fix(release): verify publication evidence reliably#350
tbitcs merged 1 commit into
mainfrom
release/0.23.3

Conversation

@tbitcs

@tbitcs tbitcs commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

Summary

  • download the immutable release-evidence artifact in post-publication verification
  • retry bounded PyPI propagation failures
  • validate local evidence before network checks
  • add regression coverage and prepare v0.23.3

Verification

  • 32 focused release tests passed
  • stable release validator accepted 0.23.3
  • Ruff check/format passed
  • Specsmith audit healthy (148 checks)
  • corrected verifier independently validated v0.23.2 and its receipt is attached

The published v0.23.2 tag and package remain immutable.

@tbitcs
tbitcs enabled auto-merge July 19, 2026 00:32
@tbitcs
tbitcs merged commit 746f5da into main Jul 19, 2026
28 checks passed
@tbitcs
tbitcs deleted the release/0.23.3 branch July 19, 2026 00:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant