feat: Backport remaining release infrastructure to stable - #344
Merged
Merged
Conversation
Ports main's release-plz publish pipeline (release-pr.yml, release.yml, release-plz.toml) and the upstream-first governance checks (upstream-first-check.yml, check-no-patch-deps.yml) onto stable, plus the docs describing the model (docs/release-process.md, docs/support-tiers.md). #342 brought stable's Tier 1A CI gate up to date but left the release-automation and branch-governance layer out of scope. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
c2patool-release.yml still did cd cli && make release / cd cli && cargo sbom, and the Makefile's release targets all referenced ../target, both leftover from when this crate lived in a cli/ subdirectory. It now lives at the repo root, so cd cli no longer exists (silently failing every step after it) and ../target would resolve outside the repo entirely once that cd is removed. Drop the cd cli prefix and point the Makefile at target directly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Ports main's current beta-preflight.yml (Rust-beta preflight variant of Tier 1A: tests-cli, docs-private, cargo-check, clippy_check) onto stable, matching the Tier 1A job set #342 already restored in ci.yml. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Restores the cargo and github-actions update configs main already re-enabled, excluding c2pa (stable picks up new c2pa releases via c2pa-release-bump.yml instead). Dependabot only reads this file from the default branch (main), so this is purely for consistency between branches. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## stable #344 +/- ##
=======================================
Coverage 72.58% 72.58%
=======================================
Files 4 4
Lines 1047 1047
=======================================
Hits 760 760
Misses 287 287 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
scouten-adobe
added
the
upstream-first-verified
This was referenced Sep 22, 2026
Closed
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Follow-up to #342, which brought stable's Tier 1A CI gate up to date with
main. This PR backports the rest of the CI/release infrastructure that was
out of scope there:
release-pr.yml,release.yml,release-plz.toml(release-plz's publish pipeline, previously entirely absent on stable)
upstream-first-check.yml,check-no-patch-deps.ymldocs/release-process.md,docs/support-tiers.mdc2patool-release.ymlandMakefilestill referenced a
cli/subdirectory (cd cli && make release,../target/...) left over from before this repo'scli/subdirectory wasremoved. Every release build has been silently failing past that step.
beta-preflight.yml: restores the full Rust-beta preflight job set(tests-cli, docs-private, cargo-check, clippy_check) to match ci.yml's
Tier 1A job set.
dependabot.yml: re-enables the config main already restored(cosmetic only — Dependabot reads this file from the default branch,
main)Deliberately left out (main-only by trigger type — schedule/workflow_dispatch
workflows only run from the default branch, or pull_request_target keyed to
base.ref == 'main'):backport.yml,reconciliation.yml,c2pa-release-bump.yml,release-rc.yml,release-train-cut.yml,track-c2pa-rs-main.yml,promote.yml,labels.yml(workflow + data file).Test plan
YAML.load_filerelease-plz.tomlvalidated as TOMLRELEASE_PLZ_ORG_TOKEN/CRATES_IO_ORG_TOKENsecrets referencedby
release-pr.yml/release.ymlare available onstable(should be,since they're already used by main's copies, but worth a one-time check
before merge since this is release-pr.yml/release.yml's first run on
this branch)
🤖 Generated with Claude Code