Publish releases from packaged artifacts

[MrHinsh]

Summary

• Publish and validate releases using packaged tools and source-commit metadata
• Use GitHub APIs for paginated alias discovery and concurrency-safe updates
• Include the release launcher in PlatformBuild packages
• Align release titles with version tags and expand Pester coverage

Testing

• Added and updated Pester unit tests for packaged release validation, alias publication, and release naming

[coderabbitai]

Warning

Review limit reached

Next included review available in 4 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 60580cf1-1ec7-4576-8043-c89b19758965

📥 Commits

Reviewing files that changed from the base of the PR and between 4e52d5a and d817212.

📒 Files selected for processing (9)

• .github/workflows/main.yaml
• system/OpenGuidePlatform.PowerShell.GuideSiteAdoption/Resolve-OpenGuidePlatform.ps1
• system/OpenGuidePlatform.PowerShell.PlatformBuild/Packaging/Package-OpenGuidePlatform.ps1
• system/OpenGuidePlatform.PowerShell.PlatformBuild/Release/Publish-PlatformRelease.ps1
• system/OpenGuidePlatform.PowerShell.PlatformBuild/Release/Publish-PlatformWorkflowAliases.ps1
• system/OpenGuidePlatform.PowerShell.PlatformBuild/Release/release.ps1
• tests/Core/NativeModulePublication.Tests.ps1
• tests/Core/PackagedRelease.Tests.ps1
• tests/Core/WorkflowReleaseAliases.Tests.ps1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-17T10:15:58.654331Z	d817212	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

Prepare completed. Workflow evidence. This is the candidate assessment, not independent policy or deployment approval.

Prepare: pass

Commit: d817212 · Platform: 1.0.3-PullRequest50.2 · Target: canary

Selection: v1.0.3-PullRequest50.2; resolved: v1.0.3-PullRequest50.2; OGP ring: preview.

Severity	Scope	Subject	Finding	What to fix
warning	platform	github.com/nkdAgility/OpenGuidePlatform/system/OpenGuidePlatform.Hugo.Guides	MODULE_FRESHNESS_UNAVAILABLE: Could not establish module freshness: Go module query failed (1): go: module github.com/nkdAgility/OpenGuidePlatform/system/OpenGuidePlatform.Hugo.Guides: not a known dependency	Review the module version through the coordinated platform update process; never change the pin during Prepare.

Guide status

No guide fixes identified by these checks.

Artifact and live-site checks run in later stages.

[Copilot]

🟡 Changes recommended

The new release.ps1 launcher currently hardcodes a packaged-directory layout for Publish-PlatformRelease.ps1, causing -Stage Release to fail when executed from the source tree.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

This PR updates the platform release pipeline to publish and validate GitHub releases using only packaged artifacts and source-commit metadata, and modernizes workflow-alias publication to use GitHub APIs with pagination and concurrency-safe updates.

Changes:

• Publish releases from build artifacts (no repo checkout) and validate published assets against the packaged manifest and hashes.
• Switch workflow alias discovery/publication from git pushes to paginated gh api + GraphQL updateRefs with lost-lease protection.
• Package and allowlist a release.ps1 launcher, and expand Pester coverage around release validation, alias paging, and release titles.

File summaries

File	Description
tests/Core/WorkflowReleaseAliases.Tests.ps1	Updates alias publication tests to mock gh api pagination + GraphQL updates and validate behavior.
tests/Core/PackagedRelease.Tests.ps1	Adds tests for validating a published release using only packaged assets + GitHub release downloads.
tests/Core/NativeModulePublication.Tests.ps1	Adjusts release publication assertions (title alignment) and stubs new alias discovery calls.
system/OpenGuidePlatform.PowerShell.PlatformBuild/Release/release.ps1	Adds packaged release launcher for Release/Validate stages using manifest + hashes.
system/OpenGuidePlatform.PowerShell.PlatformBuild/Release/Publish-PlatformWorkflowAliases.ps1	Replaces git ls-remote/push alias logic with gh api paging and GraphQL concurrency-safe updates.
system/OpenGuidePlatform.PowerShell.PlatformBuild/Release/Publish-PlatformRelease.ps1	Allows supplying SourceCommit, aligns release title with tag, and keeps coordinated publication flow.
system/OpenGuidePlatform.PowerShell.PlatformBuild/Packaging/Package-OpenGuidePlatform.ps1	Includes release.ps1 at the PlatformBuild package root for artifact-driven workflows.
system/OpenGuidePlatform.PowerShell.GuideSiteAdoption/Resolve-OpenGuidePlatform.ps1	Updates zip safety allowlist to permit release.ps1 at package root.
.github/workflows/main.yaml	Updates Release job to restore tools from PlatformBuild.zip and run packaged release.ps1 for publish/verify.

Review details

• Files reviewed: 9/9 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

Preview deployed for commit d817212: https://blue-field-06cea8c03-50.westeurope.6.azurestaticapps.net/. Live verification follows in Actions.