Skip to content

docs: decdn's sign-release.sh, not publish-crates.sh, runs open-decdn-bump.sh #200

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
thiras merged 1 commit into from
Nov 1, 2026
Merged

docs: decdn's sign-release.sh, not publish-crates.sh, runs open-decdn-bump.sh #200

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -126,7 +126,7 @@ paragraph, and that the vendored KEYS (four byte copies of decdn's) hold the key
SECURITY.md publishes; the weekly `upstream-drift` job checks the exact copies and the
mirrors against the line's newest release and flags a newer upstream line. Bump with
the checklist in `roles/decdn_node/README.md`; `scripts/open-decdn-bump.sh` opens the
bump's PR (decdn's `publish-crates.sh` runs it after each release). Upstream is public
bump's PR (decdn's `sign-release.sh` runs it after each release). Upstream is public
and also publishes the binaries as crates (`decdn-node`, `decdn-cli`, `sponsord`,
`sponsord-onramp`); the roles do not install from crates.io (no maintainer signature).

Expand Down
2 changes: 1 addition & 1 deletion ansible/roles/decdn_node/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -739,7 +739,7 @@ chart's `appVersion` name a release line, so a decdn/decdn release in that line
deployments on its own. What cannot resolve a line names one release, and moves on
every upstream release: Compose's three image digests and onramp installer pin, the
chart's example digest, the commented exact-pin examples, and the generated mirrors. `scripts/open-decdn-bump.sh
[vX.Y.Z]` opens that PR: decdn's `publish-crates.sh` runs it at the end of each decdn
[vX.Y.Z]` opens that PR: decdn's `sign-release.sh` runs it at the end of each decdn
release, and a maintainer runs it by hand from a decdn/devops clone (with no tag, it
takes decdn's latest release). It works in a worktree at `origin/main`, takes the
digests from the release's assets once their signatures verify against
Expand Down
5 changes: 3 additions & 2 deletions scripts/open-decdn-bump.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,9 @@
# Usage: scripts/open-decdn-bump.sh [--dry-run] [vX.Y.Z]
#
# With no tag it takes decdn's latest published release. decdn's
# publish-crates.sh runs it with the tag it just published; a maintainer runs it
# by hand from a clone whose `origin` is decdn/devops, with push access.
# sign-release.sh runs it with the tag it just signed, once the release is out
# of draft; a maintainer runs it by hand from a clone whose `origin` is
# decdn/devops, with push access.
#
# It works in a detached worktree at origin/main, so the working copy and its
# branch stay as they are. It commits as your git identity, pushes with your
Expand Down
Loading