Use Cloudsmith as the canonical source of releases instead of Github#625
Merged
Use Cloudsmith as the canonical source of releases instead of Github#625
Conversation
…ename. Without it, existing behavior is preserved.
concourse-server/build.gradle — Added cloudsmithRelease task that uploads .bin installers to the new releases Cloudsmith repo, using mavenVersion and a normalized filename. Guarded by onlyIf { currentBranch == 'master' }.
.circleci/config.yml — Added cloudsmithRelease to the CI build command.
Replace GitHub release page scraping with direct Cloudsmith CDN downloads via packages.cinchapi.com, preparing for the repo to go private. Switch ConcourseCodebase clone URL from HTTPS to SSH.
Prepare for making the GitHub repo private by moving all installer downloads to the Cloudsmith releases repo. Both cloudsmithUpload and cloudsmithRelease now publish with semantic versions and full filenames with build counters. ConcourseArtifacts and the upgrade script query the Cloudsmith API to resolve download URLs. Strip debug info from bytecode and stop publishing source JARs to Maven Central to reduce source code exposure.
jtnelson
changed the title
jtnelson
added a commit
that referenced
this pull request
Mar 22, 2026
…625) * cloudsmith-upload — Added -n optional flag to override the upload filename. Without it, existing behavior is preserved. concourse-server/build.gradle — Added cloudsmithRelease task that uploads .bin installers to the new releases Cloudsmith repo, using mavenVersion and a normalized filename. Guarded by onlyIf { currentBranch == 'master' }. .circleci/config.yml — Added cloudsmithRelease to the CI build command. * Migrate release artifact downloads from GitHub to Cloudsmith Replace GitHub release page scraping with direct Cloudsmith CDN downloads via packages.cinchapi.com, preparing for the repo to go private. Switch ConcourseCodebase clone URL from HTTPS to SSH. * Migrate artifact distribution from GitHub to Cloudsmith Prepare for making the GitHub repo private by moving all installer downloads to the Cloudsmith releases repo. Both cloudsmithUpload and cloudsmithRelease now publish with semantic versions and full filenames with build counters. ConcourseArtifacts and the upgrade script query the Cloudsmith API to resolve download URLs. Strip debug info from bytecode and stop publishing source JARs to Maven Central to reduce source code exposure. * standardize gradle versions that are shared across projects and upgrade gson * change shared jline name to jline2 * fix comment * fix bug in upgrade script * add conman * nvm * handle review feedback
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Change the concourse repo from an public repo on Github to a private one. This effectively closes the source. We'll still consider Concourse to be "free software", but for IP protection, it is best for us to keep the source closed (for now)