ci(release): release.py released-as, the checked release a tag's commit already has #11

Merged

HumanBean merged 1 commit from HumanBean/LongshotLauncher:release-speed into main

2026-11-13 06:34:06 +00:00

HumanBean commented

2026-11-13 06:28:08 +00:00

Owner

Why

Longshot's release workflow now asks, on a tag, for the checked release CI already made of the same commit, so a tag skips the build checks that release's run passed. scripts/release.py, tests/test_release.py, docs/releases.md and RELEASING.md are byte-identical with MagicBeanDev/Longshot's, so the same change lands here.

What changed

scripts/release.py: released-as <commit> [--not <tag>] (released_as(), download()) finds the published release of the commit: a nightly whose tag is that commit, or a stable's release candidate. It takes that release only when a trusted key signed its SHA256SUMS and the list names exactly its files; a release that fails either check stops the caller. When FORGEJO_UPLOAD_API is set, files come through its host.
tests/test_release.py: ReleasedAs covers the lookup, the verification, the address without Cloudflare and the command.
docs/releases.md, RELEASING.md: what a Longshot tag does with it, and the corrected assemble cpm --add line (Longshot's dav1d job is gone).
This repository's release.yml does not change. The launcher's files carry the tag too (-p:LongshotTag), so they can't be reused, and its build has no check that ships no file.

Longshot's PR: MagicBeanDev/Longshot#143. The four files are identical in both repositories (cmp).

Testing

python -I -B tests/test_release.py: 24 tests pass here and in Longshot. released-as was checked from Longshot against git.magicbean.dev: it found nightly-34-545618fc, signed with the real key.

Risk and rollback

Nothing in this repository calls released-as; reverting the commit is enough.

## Why Longshot's release workflow now asks, on a tag, for the checked release CI already made of the same commit, so a tag skips the build checks that release's run passed. `scripts/release.py`, `tests/test_release.py`, `docs/releases.md` and `RELEASING.md` are byte-identical with MagicBeanDev/Longshot's, so the same change lands here. ## What changed - `scripts/release.py`: `released-as <commit> [--not <tag>]` (`released_as()`, `download()`) finds the published release of the commit: a nightly whose tag is that commit, or a stable's release candidate. It takes that release only when a trusted key signed its `SHA256SUMS` and the list names exactly its files; a release that fails either check stops the caller. When `FORGEJO_UPLOAD_API` is set, files come through its host. - `tests/test_release.py`: `ReleasedAs` covers the lookup, the verification, the address without Cloudflare and the command. - `docs/releases.md`, `RELEASING.md`: what a Longshot tag does with it, and the corrected `assemble cpm --add` line (Longshot's dav1d job is gone). - This repository's `release.yml` does not change. The launcher's files carry the tag too (`-p:LongshotTag`), so they can't be reused, and its build has no check that ships no file. Longshot's PR: https://git.magicbean.dev/MagicBeanDev/Longshot/pulls/143. The four files are identical in both repositories (`cmp`). ## Testing `python -I -B tests/test_release.py`: 24 tests pass here and in Longshot. `released-as` was checked from Longshot against git.magicbean.dev: it found `nightly-34-545618fc`, signed with the real key. ## Risk and rollback Nothing in this repository calls `released-as`; reverting the commit is enough.

HumanBean added 1 commit

2026-11-13 06:28:08 +00:00

ci(release): release.py released-as, the checked release a tag's commit already has (the shared files, as in Longshot)

CI / Compile and test (pull_request) Has been skipped

Details

CI / Conventional Commit title (pull_request) Successful in 6s

Details

d12888e220

HumanBean referenced this pull request from MagicBeanDev/Longshot

2026-11-13 06:30:56 +00:00

ci(release): no dav1d build per release, and a tag skips the build checks its commit's release passed #143

HumanBean merged commit 00741b6056 into main