Skip to content

Verify release asset contract#14

Merged
PerfectPan merged 1 commit into
mainfrom
chore/release-prep
May 4, 2026
Merged

Verify release asset contract#14
PerfectPan merged 1 commit into
mainfrom
chore/release-prep

Conversation

@PerfectPan
Copy link
Copy Markdown
Owner

Summary

  • Fix release checksum files to reference archive basenames instead of dist/... paths, so installer checksum verification works after downloading assets.
  • Add OCVM_INSTALL_DRY_RUN plus uname overrides to verify installer target and asset selection without downloading or installing.
  • Add scripts/check-release-prep.sh and run it from CI alongside shell syntax checks.

Why

The release workflow previously generated Unix checksum files with dist/ocvm-...tar.gz in the checked filename. install.sh downloads archives into a temp directory as ocvm-...tar.gz, so sha256sum -c would not find the path from the checksum file.

Validation

  • sh -n install.sh scripts/*.sh
  • ./scripts/check-release-prep.sh
  • cargo fmt --check
  • git diff --check
  • cargo clippy --all-targets -- -D warnings
  • cargo test
  • cargo build --release
  • cargo package --allow-dirty --offline -> 29 files, 29.5KiB compressed
  • publish-safety scan with generated artifact exclusions

Not merging until review.

@PerfectPan PerfectPan merged commit 6ebfc77 into main May 4, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant