Skip to content

Require shared CI checks and make releases recoverable - #68

Merged
sturimcode merged 1 commit into
mainfrom
codex/release-flow-reliability
Sep 7, 2026
Merged

Require shared CI checks and make releases recoverable#68
sturimcode merged 1 commit into
mainfrom
codex/release-flow-reliability

Conversation

@sturimcode

Copy link
Copy Markdown
Owner

A GitHub release failure currently forces the PyPI upload step to run again on retry, even when the package was already published. PRs and releases also have separate copies of the test matrix, and main has no required CI check.

This change moves lint and the nine test combinations into one reusable workflow, called by both PR CI and publishing. A stable CI check fails if the shared checks fail, are skipped, or are cancelled. Main will require that check from GitHub Actions with an up-to-date branch, including for admins.

PyPI upload and GitHub release creation now run in separate jobs. Re-running failed jobs can finish a release without repeating a successful upload. Existing published notes are preserved, drafts can be finished, and concurrent publication attempts for the same tag are serialized. The release guide documents the process and recovery command.

Validation: Actionlint passed. Local execution of the workflow shell steps covered all CI gate outcomes, matching and mismatched version tags, a branch dispatch, and new, existing, draft, and failed GitHub release creation. No application code or package version changed.

@sturimcode
sturimcode merged commit dfd5d88 into main Sep 7, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant