Build release bundles from the declared Git commit #1045

Merged
rockachopa merged 1 commits from timmy/1044-declared-git-release-bundles into main 2026-08-17 22:33:48 +00:00
Owner

Summary

  • enumerate runtime members from the exact declared Git tree
  • read bytes and executable modes from Git objects rather than the ambient worktree
  • fail closed for unavailable commits, unsafe/generated tracked members, or missing runtime files
  • verify every release member against the declared commit before CI publication

Validation

  • RED: polluted-worktree reproducibility and unknown-commit tests failed against the old packager
  • GREEN: focused release/CI tests: 4 passed
  • full suite: 1979 passed, 7 skipped
  • real origin/main build: verified, 439,288-byte archive, zero bytecode/cache members

Closes #1044

## Summary - enumerate runtime members from the exact declared Git tree - read bytes and executable modes from Git objects rather than the ambient worktree - fail closed for unavailable commits, unsafe/generated tracked members, or missing runtime files - verify every release member against the declared commit before CI publication ## Validation - RED: polluted-worktree reproducibility and unknown-commit tests failed against the old packager - GREEN: focused release/CI tests: 4 passed - full suite: 1979 passed, 7 skipped - real origin/main build: verified, 439,288-byte archive, zero bytecode/cache members Closes #1044
timmy added 1 commit 2026-08-17 22:26:02 +00:00
ci: build releases from declared Git commits (Closes #1044)
All checks were successful
CI / lint (pull_request) Successful in 2m38s
CI / build-release (pull_request) Successful in 6s
CI / browser-journey (pull_request) Successful in 2m24s
CI / release-candidate (pull_request) Has been skipped
2082fbd5eb
rockachopa merged commit c655cf5861 into main 2026-08-17 22:33:48 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#1045
No description provided.