Skip to content

Add tag-driven v1.0.0 release pipeline for amd64/arm64/arm and patch artifact download action#14

Merged
eichenberger merged 1 commit into
mainfrom
copilot/create-release-v1-0-0
May 24, 2026
Merged

Add tag-driven v1.0.0 release pipeline for amd64/arm64/arm and patch artifact download action#14
eichenberger merged 1 commit into
mainfrom
copilot/create-release-v1-0-0

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 24, 2026

  • Review existing automated-build and release workflows and identify duplicated build logic
  • Extract shared multi-arch static build job into a reusable workflow
  • Update automated-build.yml to call the reusable workflow
  • Update release.yml to call the reusable workflow and keep release asset publishing
  • Validate local build still succeeds
  • Run CodeQL security check and address findings

Add a release workflow triggered on v* tag pushes that builds static
amd64, arm64 and armhf binaries and uploads them as release assets.

Patch actions/download-artifact to v4.1.3 to fix the arbitrary file
write vulnerability present in earlier v4 releases.

Extract the shared static multi-arch build logic into a reusable
shared-static-multi-arch-build.yml workflow, consumed by both the
automated build and the release workflow.
@eichenberger eichenberger force-pushed the copilot/create-release-v1-0-0 branch from d58e19f to 09df309 Compare May 24, 2026 15:06
@eichenberger eichenberger marked this pull request as ready for review May 24, 2026 15:08
@eichenberger eichenberger merged commit a3d5882 into main May 24, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants