Skip to content

ci: render release notes from a reviewed template (digest is known only after the build) - #8

Merged
webos21 merged 1 commit into
mainfrom
ci-release-notes
Nov 11, 2026
Merged

webos21 merged 1 commit into
mainfrom
ci-release-notes

Conversation

@webos21

@webos21 webos21 commented Nov 11, 2026

Copy link
Copy Markdown
Owner

Fixes a design flaw found before the first dry run: publish required the notes to contain the archive SHA-256, which cannot be committed before the archive exists. The notes are now a reviewed template with explicit tokens.

🤖 Generated with Claude Code

…before-build ordering

The notes were required to contain the archive digest, which is unknown until the archive is built, so a committed
note could never pass. The reviewed template now carries explicit tokens that publish fills, and refuses a template
without the digest token or with an unknown token. A first template states only what the workflow itself verifies.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@webos21
webos21 merged commit 8063bbf into main Nov 11, 2026
7 checks passed
@webos21
webos21 deleted the ci-release-notes branch November 11, 2026 04:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant