Skip to content

Check the manifest metadata a dry run cannot see - #36

Merged
Reim-developer merged 1 commit into
masterfrom
dev
Oct 9, 2026
Merged

Reim-developer merged 1 commit into
masterfrom
dev

Conversation

@Reim-developer

Copy link
Copy Markdown
Owner

The second publish run failed at crate 7 of 16 with a different error:

error: failed to publish sephera_graph_cpp v0.7.1 status 400 Bad Request: expected at most 5 keywords per crate

\sephera_graph_cpp\ had seven keywords, \sephera_graph_javascript\ six. Every dry
run was green -- a dry run does not upload, so it never asks the registry whether it
would accept the manifest. The resume logic from #35 worked exactly as intended: the
six already-published crates were skipped and it went straight to the crate that was
going to fail.

Two things:

Both manifests trimmed to five keywords. C++ drops \c++\ and \include: \cpp
is the crates.io convention and what a search finds, and \header\ names what the
crate parses where \include\ names a keyword inside the source. JavaScript drops

pm, the least relevant term to someone looking for an import resolver.

\check_metadata\ is new, and it runs in the mode CI uses (\publish_dry_run) as
well as the mode a real publish uses. That is the point: this is now caught by the CI
job rather than by a failed upload at crate 7. It reports which keywords to drop
rather than truncating silently -- a manifest with seven keywords is one somebody
meant something by.

Teeth: seven keywords injected into a manifest is caught by name and the script
exits 1; a removed description is caught the same way; both restore clean.

…uploads

The second publish run failed at crate 7 of 16 with a different error:

    error: failed to publish sephera_graph_cpp v0.7.1
      status 400 Bad Request: expected at most 5 keywords per crate

`sephera_graph_cpp` carried seven keywords and `sephera_graph_javascript` six.
Every dry run was green, because a dry run does not upload and so never asks the
registry whether it would accept the manifest. The fact was readable in the
manifest the whole time.

Both are trimmed to five. For C++ that means dropping `c++` and `include`: `cpp`
is the convention on crates.io and the one a search actually finds, and `header`
names what the crate parses where `include` names a keyword inside the source.
For JavaScript that means dropping `npm`, the least relevant term to someone
looking for an import resolver.

`check_metadata` is new and runs in both the mode CI uses and the mode a real
publish uses, so this is caught by `publish_dry_run` rather than by a failed
upload at the seventh crate. It checks the keyword and category counts and that a
description exists, and reports rather than silently truncating -- a manifest
that declares seven keywords is a manifest somebody meant something by, and the
right response is to tell them which to drop.

Teeth: seven keywords in a manifest is caught by name and the script exits 1;
a missing description is caught the same way; both restore clean.
@vercel

vercel Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
sephera Ready Ready Preview Oct 9, 2026 1:21pm UTC

@coderabbitai

coderabbitai Bot commented Oct 9, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 26 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: Repository UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 6e9eadd8-9a5b-4705-b557-59d7149b5f16

📥 Commits

Reviewing files that changed from the base of the PR and between f0d1d23 and 15feae1.


📒 Files selected for processing (3)
  • crates/sephera_graph_cpp/Cargo.toml
  • crates/sephera_graph_javascript/Cargo.toml
  • scripts/check_publish_order.py


  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown

Coverage and benchmarks

Line coverage: 91.70% (15,438/16,835 lines)

Benchmarks (5 measured runs per command)

dataset files mean median min max
small 65 0.002s 0.002s 0.002s 0.002s
medium 282 0.003s 0.003s 0.003s 0.003s
large 898 0.009s 0.009s 0.009s 0.009s

Benchmark numbers come from a shared runner and compare within a run, not across runs.

@Reim-developer
Reim-developer merged commit e272810 into master Oct 9, 2026
31 checks passed

This branch was successfully deployed

1 active deployment
Preview — 15feae13 Deployed Oct 9, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant