Skip to content

fix: preserve release tags across GitHub metadata updates - #53

Merged
xxvcc merged 1 commit into
mainfrom
fix/publisher-tag-binding
Oct 22, 2026
Merged

xxvcc merged 1 commit into
mainfrom
fix/publisher-tag-binding

Conversation

@xxvcc

@xxvcc xxvcc commented Oct 22, 2026

Copy link
Copy Markdown
Owner

GitHub release updates can remove the existing tag when tag_name is omitted. Include the already-validated tag in publication, draft rollback and Latest PATCH requests so the numeric Release ID remains bound to the intended signed tag. Latest recovery uses the target release's own tag.

Regression tests model GitHub changing an omitted tag to an untagged-* value and cover publication, rollback, current-version promotion and restoration of another release. The existing release identity, immutability, asset and recovery checks remain in force.

Validation: the unpatched publisher fails the new regression scenarios; the patched publisher passes them. Full package race and shell checks are recorded with the release evidence.

@xxvcc
xxvcc merged commit 7e031f0 into main Oct 22, 2026
8 checks passed
@xxvcc
xxvcc deleted the fix/publisher-tag-binding branch October 22, 2026 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant