Skip to content

Release-assets policy: the collect set, every attachable type in the signature check, the pruned snapshot pre-release - #53

Merged
bernardladenthin merged 1 commit into
mainfrom
claude/hopeful-pascal-9jlbqb
Oct 12, 2026
Merged

bernardladenthin merged 1 commit into
mainfrom
claude/hopeful-pascal-9jlbqb

Conversation

@bernardladenthin

Copy link
Copy Markdown
Owner

Summary

Policy side of a cross-repo change in java-llama.cpp, BitcoinAddressFinder, srcmorph and streambuffer: the GitHub release assets were incomplete against Maven Central (no poms, jllama's llama-platform absent, its AARs unsigned although their .asc existed) and the snapshot pre-release accumulated (208 assets on jllama, SpotBugs plugin jars from 2026-05 on three repos).

policies/fat-jar-release-assets.md:

  • "Attach first, then go red": the report step counts every attachable type (*.jar, *.aar, *.pom); the status paragraph says which jobs are byte-identical through shared-files.sha256 and why jllama's copies are not.
  • New paragraph "What the collect steps copy": every module's pom + .pom.asc (maven-gpg writes both into target/, also for pom-only modules), jllama's AAR signatures, poms and sources/javadoc jars, the agent's thin jar -- with the measurement that found the gaps, and the check against Central's maven-metadata.xml.
  • New section "The snapshot pre-release holds exactly the current upload": the measured backlog, the four rules (keep-set = the uploaded directory, after the upload, every deletion printed, versioned releases never pruned), nothing deleted by hand.

crossrepostatus.md: one status bullet next to "No release asset is attached that CI has not run".

Test plan

  • Docs only; the four implementing PRs carry the verification
  • Links and section names match the PRs' references ("Attach first, then go red", "The snapshot pre-release holds exactly the current upload")

Related issues / PRs

Checklist

  • No security-sensitive changes
  • Sibling pointers unchanged (section names added, none renamed)

🤖 Generated with Claude Code

https://claude.ai/code/session_01AytmJF9faEiQEVt6eetQS2


Generated by Claude Code

…signature check, the pruned snapshot pre-release

What the collect steps copy since 2026-10-12 (every module's pom + .pom.asc,
jllama's AAR signatures, poms and sources/javadoc jars, the agent's thin jar),
the signature check over *.jar, *.aar and *.pom, and the new rule that
github-snapshot deletes every asset the run did not upload while versioned
releases are never pruned -- with the measurements that found the gaps. Status
line in crossrepostatus.md.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AytmJF9faEiQEVt6eetQS2
@bernardladenthin
bernardladenthin merged commit f4fdfa3 into main Oct 12, 2026
2 checks passed
@bernardladenthin
bernardladenthin deleted the claude/hopeful-pascal-9jlbqb branch October 12, 2026 07:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant