Skip to content

fix(release): prevent release if tag major/minor isnt in metadata.yaml - #90

Merged
mweibel merged 1 commit into
mainfrom
verify-release-manifests
Sep 22, 2026
Merged

mweibel merged 1 commit into
mainfrom
verify-release-manifests

Conversation

@mweibel

@mweibel mweibel commented Sep 21, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

Comment thread hack/verify-release-metadata/main.go Outdated
os.Exit(1)
}
if err := verifyReleaseSeries(*tag, metadata); err != nil {
fmt.Fprintf(os.Stderr, "Error verifying release metadata: %v\n", err)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This message could be improved: The verification here actually succeeded in finding a mismatch. Consider "Release metadata verification failed: %v\n" to avoid making it sound like an internal tool error.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good idea, fixed.

tag: "v1.1.0",
metadata: "releaseSeries: [\n",
wantError: "parse metadata",
},

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Another error case we are handling but there is no test yet:

		{
			name:      "empty release series fails",
			tag:       "v1.0.0",
			metadata:  "releaseSeries: []\n",
			wantError: "no release series",
		},

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fair enough, added that test.

@mweibel
mweibel force-pushed the verify-release-manifests branch from af30502 to 5a32783 Compare September 22, 2026 08:44
@mweibel
mweibel merged commit 5f7176a into main Sep 22, 2026
9 checks passed
@mweibel
mweibel deleted the verify-release-manifests branch September 22, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants