fix: retry releases from immutable signed tags - #8

Merged

salim4n merged 1 commit into

mainfrom

fix/dispatch-from-signed-tag

Jul 14, 2026

salim4n commented Jul 14, 2026

Member

Summary

keep package contents pinned to the existing signed release tag
load the OIDC helper from the exact immutable commit that supplied the running workflow
make workflow-dispatch retries work when an older tag predates the current release automation

Source

private source commit: 650b692a8b5794e0ee6795a30bb390cd0c8798f9
public commit is SSH-signed and GitHub-verified

Validation

118 SDK tests
TypeScript typecheck and ESM/CommonJS build
public boundary validation and smoke imports
dependency audit: no vulnerabilities
extracted automation compared byte-for-byte and built with Bun


          fix: load release automation from workflow commit

e88dc96

salim4n merged commit 2d18fae into main

1 check passed

salim4n deleted the fix/dispatch-from-signed-tag branch

July 14, 2026 22:00

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet