Skip to content

Commit d609d15

Browse files
authored
release: prepare v0.15.1 beta-21 fix-forward (#543)
* release: prepare v0.15.1 fix-forward Signed-off-by: Jeremi Joslin <jeremi@joslin.fr> * test: update v0.15.1 authoring digest Signed-off-by: Jeremi Joslin <jeremi@joslin.fr> * release: refresh beta-21 preparation base Signed-off-by: Jeremi Joslin <jeremi@joslin.fr> * test(release): cover candidate artifact cleanup Refresh the v0.15.1 Relay and Notary advisory evidence from canonical binaries and review images. Signed-off-by: Jeremi Joslin <jeremi@joslin.fr> --------- Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
1 parent cef8fb9 commit d609d15

50 files changed

Lines changed: 548 additions & 202 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/release.yml‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -114,9 +114,9 @@ jobs:
114114
import release_candidate
115115
116116
message = Path(sys.argv[1]).read_text(encoding="utf-8")
117-
if message.endswith("\n\n"):
118-
message = message[:-1]
119-
binding = release_candidate.parse_tag_binding(message)
117+
if not message.endswith("\n"):
118+
raise SystemExit("git for-each-ref did not emit a record separator")
119+
binding = release_candidate.parse_tag_binding(message[:-1])
120120
with Path(sys.argv[2]).open("a", encoding="utf-8") as handle:
121121
for field in ("run_id", "run_attempt", "receipt_sha256"):
122122
handle.write(f"{field}={binding[field]}\n")
@@ -373,6 +373,16 @@ jobs:
373373
git for-each-ref --format='%(contents)' \
374374
"refs/tags/${{ needs.verify.outputs.tag }}" \
375375
> promotion/control/tag-message
376+
python3 - promotion/control/tag-message <<'PY'
377+
import sys
378+
from pathlib import Path
379+
380+
path = Path(sys.argv[1])
381+
message = path.read_text(encoding="utf-8")
382+
if not message.endswith("\n"):
383+
raise SystemExit("git for-each-ref did not emit a record separator")
384+
path.write_text(message[:-1], encoding="utf-8")
385+
PY
376386
python3 release/scripts/release_candidate.py verify-tag-binding \
377387
--message promotion/control/tag-message \
378388
--receipt "${receipt}" \

‎Cargo.lock‎

Lines changed: 26 additions & 26 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎Cargo.toml‎

Lines changed: 24 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ exclude = [
4040
resolver = "2"
4141

4242
[workspace.package]
43-
version = "0.15.0"
43+
version = "0.15.1"
4444
edition = "2021"
4545
rust-version = "1.95"
4646
license = "Apache-2.0"
@@ -51,29 +51,29 @@ repository = "https://github.com/registrystack/registry-stack"
5151
unsafe_code = "forbid"
5252

5353
[workspace.dependencies]
54-
registry-config-report = { path = "crates/registry-config-report", version = "0.15.0" }
55-
registry-language-server = { path = "crates/registry-language-server", version = "0.15.0" }
56-
registry-manifest-core = { path = "crates/registry-manifest-core", version = "0.15.0" }
57-
registry-notary-client = { path = "crates/registry-notary-client", version = "0.15.0" }
58-
registry-notary-core = { path = "crates/registry-notary-core", version = "0.15.0" }
59-
registry-relay = { path = "crates/registry-relay", version = "0.15.0" }
60-
registry-notary-server = { path = "crates/registry-notary-server", version = "0.15.0", default-features = false }
61-
registry-notary-worker-harness = { path = "crates/registry-notary-worker-harness", version = "0.15.0" }
62-
registry-platform-audit = { path = "crates/registry-platform-audit", version = "0.15.0" }
63-
registry-platform-authcommon = { path = "crates/registry-platform-authcommon", version = "0.15.0" }
64-
registry-platform-cache = { path = "crates/registry-platform-cache", version = "0.15.0" }
65-
registry-platform-canonical-json = { path = "crates/registry-platform-canonical-json", version = "0.15.0" }
66-
registry-platform-config = { path = "crates/registry-platform-config", version = "0.15.0" }
67-
registry-platform-crypto = { path = "crates/registry-platform-crypto", version = "0.15.0" }
68-
registry-platform-httpsec = { path = "crates/registry-platform-httpsec", version = "0.15.0" }
69-
registry-platform-httputil = { path = "crates/registry-platform-httputil", version = "0.15.0" }
70-
registry-platform-oid4vci = { path = "crates/registry-platform-oid4vci", version = "0.15.0" }
71-
registry-platform-oidc = { path = "crates/registry-platform-oidc", version = "0.15.0" }
72-
registry-platform-ops = { path = "crates/registry-platform-ops", version = "0.15.0" }
73-
registry-platform-pdp = { path = "crates/registry-platform-pdp", version = "0.15.0" }
74-
registry-platform-replay = { path = "crates/registry-platform-replay", version = "0.15.0" }
75-
registry-platform-sdjwt = { path = "crates/registry-platform-sdjwt", version = "0.15.0" }
76-
registry-platform-testing = { path = "crates/registry-platform-testing", version = "0.15.0" }
54+
registry-config-report = { path = "crates/registry-config-report", version = "0.15.1" }
55+
registry-language-server = { path = "crates/registry-language-server", version = "0.15.1" }
56+
registry-manifest-core = { path = "crates/registry-manifest-core", version = "0.15.1" }
57+
registry-notary-client = { path = "crates/registry-notary-client", version = "0.15.1" }
58+
registry-notary-core = { path = "crates/registry-notary-core", version = "0.15.1" }
59+
registry-relay = { path = "crates/registry-relay", version = "0.15.1" }
60+
registry-notary-server = { path = "crates/registry-notary-server", version = "0.15.1", default-features = false }
61+
registry-notary-worker-harness = { path = "crates/registry-notary-worker-harness", version = "0.15.1" }
62+
registry-platform-audit = { path = "crates/registry-platform-audit", version = "0.15.1" }
63+
registry-platform-authcommon = { path = "crates/registry-platform-authcommon", version = "0.15.1" }
64+
registry-platform-cache = { path = "crates/registry-platform-cache", version = "0.15.1" }
65+
registry-platform-canonical-json = { path = "crates/registry-platform-canonical-json", version = "0.15.1" }
66+
registry-platform-config = { path = "crates/registry-platform-config", version = "0.15.1" }
67+
registry-platform-crypto = { path = "crates/registry-platform-crypto", version = "0.15.1" }
68+
registry-platform-httpsec = { path = "crates/registry-platform-httpsec", version = "0.15.1" }
69+
registry-platform-httputil = { path = "crates/registry-platform-httputil", version = "0.15.1" }
70+
registry-platform-oid4vci = { path = "crates/registry-platform-oid4vci", version = "0.15.1" }
71+
registry-platform-oidc = { path = "crates/registry-platform-oidc", version = "0.15.1" }
72+
registry-platform-ops = { path = "crates/registry-platform-ops", version = "0.15.1" }
73+
registry-platform-pdp = { path = "crates/registry-platform-pdp", version = "0.15.1" }
74+
registry-platform-replay = { path = "crates/registry-platform-replay", version = "0.15.1" }
75+
registry-platform-sdjwt = { path = "crates/registry-platform-sdjwt", version = "0.15.1" }
76+
registry-platform-testing = { path = "crates/registry-platform-testing", version = "0.15.1" }
7777

7878
crosswalk-core = { git = "https://github.com/PublicSchema/crosswalk", rev = "1d44ec735fdc8a7c719264b339574371e8330337", version = "0.2.0" }
7979
crosswalk-functions = { git = "https://github.com/PublicSchema/crosswalk", rev = "1d44ec735fdc8a7c719264b339574371e8330337", version = "0.2.0" }

‎SECURITY.md‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -44,14 +44,14 @@ include cosign signatures without SLSA provenance.
4444

4545
For each signed release asset, download three files from the GitHub Release:
4646

47-
- The asset, for example `registryctl-v0.15.0-linux-amd64`
48-
- The matching signature, for example `registryctl-v0.15.0-linux-amd64.sig`
49-
- The matching certificate, for example `registryctl-v0.15.0-linux-amd64.pem`
47+
- The asset, for example `registryctl-v0.15.1-linux-amd64`
48+
- The matching signature, for example `registryctl-v0.15.1-linux-amd64.sig`
49+
- The matching certificate, for example `registryctl-v0.15.1-linux-amd64.pem`
5050

5151
Then verify the asset:
5252

5353
```bash
54-
asset=registryctl-v0.15.0-linux-amd64
54+
asset=registryctl-v0.15.1-linux-amd64
5555

5656
cosign verify-blob \
5757
--certificate "${asset}.pem" \
@@ -69,7 +69,7 @@ For releases with SLSA provenance, download the provenance asset and verify the
6969
artifact against the release tag:
7070

7171
```bash
72-
tag=v0.15.0
72+
tag=v0.15.1
7373
asset=registryctl-${tag}-linux-amd64
7474
provenance=registry-stack-${tag}-release-provenance.intoto.jsonl
7575

‎crates/registry-relay/CHANGELOG.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,11 @@
22

33
## Unreleased
44

5+
## 0.15.1 - 2026-07-28
6+
7+
- No user-visible Registry Relay changes. This release fixes forward from the
8+
failed v0.15.0 publication workflow.
9+
510
## 0.15.0 - 2026-07-28
611

712
- Validate every materialized XLSX row before activation, including rows after

‎crates/registry-relay/docs/release-notes.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,11 @@
22

33
## Unreleased
44

5+
## 0.15.1
6+
7+
- Registry Relay has no user-visible changes. This release fixes forward from
8+
the failed v0.15.0 publication workflow.
9+
510
## 0.15.0
611

712
- BREAKING: Attribute release is stable and enabled in the default and

‎crates/registry-relay/openapi/registry-relay.openapi.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2809,7 +2809,7 @@
28092809
},
28102810
"summary": "Read-only data gateway exposing entity records, catalog metadata, and SHACL/DCAT-AP shapes for governed datasets.",
28112811
"title": "Registry Relay API",
2812-
"version": "0.15.0"
2812+
"version": "0.15.1"
28132813
},
28142814
"openapi": "3.1.0",
28152815
"paths": {

0 commit comments

Comments
 (0)