Skip to content

docs(workflow): document signing and release finalization#66

Merged
bhdicaire merged 2 commits into
mainfrom
work/signing-standard
Jun 5, 2026
Merged

docs(workflow): document signing and release finalization#66
bhdicaire merged 2 commits into
mainfrom
work/signing-standard

Conversation

@bhdicaire

@bhdicaire bhdicaire commented Jun 5, 2026

Copy link
Copy Markdown
Member

This Pull Request updates the release workflow so the operational steps match the signing model we want to use.

Detail

This PR documents:

  • SSH/1Password signing for day-to-day commits
  • Sigstore/gitsign for release tags and provenance-sensitive actions
  • per-command gitsign tag creation so global SSH commit signing remains intact
  • git verify-tag usage for annotated gitsign release tags
  • GitHub Release creation with gh release create
  • release-please label cleanup from autorelease: pending to autorelease: tagged
  • CLI flows for PRs, release-please PRs, Dependabot maintenance, and missing release-tag repair

Checks

  • npm run format:check

Notes

This is documentation-only and does not change runtime behavior.

@bhdicaire bhdicaire requested a review from felleg as a code owner June 5, 2026 14:40
@bhdicaire bhdicaire self-assigned this Jun 5, 2026

@bhdicaire bhdicaire left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good

@bhdicaire bhdicaire merged commit d10a76f into main Jun 5, 2026
2 checks passed
@bhdicaire bhdicaire deleted the work/signing-standard branch June 5, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant