Skip to content

chore: publish releases to Chocolatey and WinGet - #109

Merged
Viktor (tiulpin) merged 2 commits into
masterfrom
tv/chocolatey-winget
Oct 22, 2026
Merged

Viktor (tiulpin) merged 2 commits into
masterfrom
tv/chocolatey-winget

Conversation

@tiulpin

@tiulpin Viktor (tiulpin) commented Oct 22, 2026 •

Copy link
Copy Markdown
Member

Turns on the chocolateys and winget publishers that were already defined in .goreleaser.yaml but skipped at release time. Also stops pinning the Go patch version, which was what failed CI here.

Changes

Publishing to Chocolatey and WinGet (chore: commit)

  • .teamcity.yml:
    • installs choco 2.4.3 on mono in the release step, the same approach as teamcity-cli, but checks the download against a pinned sha256 (CHOCO_SHA256) the way codesign-client is checked, and exports ChocolateyInstall
    • checks up front that CHOCOLATEY_API_KEY and WINGET_GITHUB_TOKEN are set
    • sets WINGET_FORK_OWNER: tiulpin
    • changes --skip to aur,npm
  • .goreleaser.yaml: adds the YouTrack icon_url to the Chocolatey package and updates the comment about skipped channels.

Go version (fix: commit)

  • go.mod declares go 1.26.0, like teamcity-cli, instead of an exact patch release.
  • CI uses go-version: '1.26' with check-latest: true, so it always gets the newest 1.26 patch. govulncheck no longer runs on a pinned GOTOOLCHAIN; that pin is what caused GO-2026-6809 to fail CI.
  • The release image moves from goreleaser-pro:v2.17.0 (Go 1.26.4) to goreleaser-pro:latest (currently Go 1.27.1), like teamcity-cli. Without the go.mod pin, the image's Go is the toolchain the release is built with.
  • README and the get-started doc now say "Go 1.26+".

Secrets

These are already on the YouTrack_CLI_Release pipeline:

  • env.CHOCOLATEY_API_KEY
  • env.WINGET_GITHUB_TOKEN: a classic PAT with only public_repo. It needs to push to the fork and open PRs into microsoft/winget-pkgs, which fine-grained tokens can't do yet.

Verification

  • teamcity pipeline validate .teamcity.yml passes
  • the choco install works in both goreleaser-pro:v2.17.0 and :latest: the checksum matches, choco --version prints 2.4.3, and choco pack builds a test package
  • make check passes: fmt-check, lint (0 issues), build and the full E2E suite. One E2E test hit a build-cache glitch on the first run and passed on the re-run.
  • govulncheck reports no vulnerabilities

After merge

The first Chocolatey and WinGet submissions go through manual moderation. Install instructions for the README and release footer will follow once both packages are approved.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-22T08:59:24.025617Z 294a56a PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 294a56a023

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "Codex (@codex) review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "Codex (@codex) address that feedback".

Comment thread .teamcity.yml
Install choco 2.4.3 on mono in the release step, pinned by sha256 like
codesign-client, and stop skipping the chocolatey and winget publishers.
WinGet manifests go through the tiulpin/winget-pkgs fork, matching
teamcity-cli. Adds the YouTrack icon to the Chocolatey package.
Declare go 1.26.0 like teamcity-cli and let CI pick up the latest 1.26
patch, so stdlib fixes such as GO-2026-6809 no longer need a go.mod
bump. Releases build on goreleaser-pro:latest, which tracks current Go.
@tiulpin
Viktor (tiulpin) merged commit 55812fc into master Oct 22, 2026
2 checks passed
@tiulpin
Viktor (tiulpin) deleted the tv/chocolatey-winget branch October 22, 2026 10:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant