Skip to content

ci(a13): bootstrap isolated release builds before signing - #17

Merged
thetvplus merged 1 commit into
mainfrom
devin/a13-release-bootstrap-20261024
Oct 24, 2026
Merged

thetvplus merged 1 commit into
mainfrom
devin/a13-release-bootstrap-20261024

Conversation

@thetvplus

Copy link
Copy Markdown
Owner

两次受保护 Signed Build 在隔离 Gradle 调用阶段失败,但官方构建输出按密钥保护策略隐藏,未产生可恢复的候选 Artifact。本 PR 在加载签名文件前加入无密钥的冷启动预检,让下载/配置错误可直接定位,并保持正式构建输出私密。

  • 预检强制 officialRelease=false,移除签名变量、GitHub Token 和签名配置路径;失败时不加载密钥。
  • 预检和正式构建复用同一次临时 Gradle home/project cache,禁用构建/配置缓存保存、后台 daemon 和 scan,退出时清理全部临时目录。
  • 冷启动后再次核对精确 main、CI、Environment 和发行状态,再加载原有 PKCS#12;版本、证书和来源门禁保持。
  • 记录维护者追加授权:Agent 可代执行本版 GitHub 原生 required-reviewer 审批,保留 reviewer、main-only 和禁止管理员绕过;不引入 main push 自动发布。

验证:941 项 Python(4 既有 skipped)、45 项发行相关回归、compileall、Fast --changed 静态门禁、CI 可移植性、文本编码和 diff-check 通过。Android 源码、版本和依赖均未修改;Android 完整验证沿用相同代码的已有本地结果,远端 CI 仍完整执行。

Base main: 5cf42ac。原 RC 的两项额外提交已通过 PR #16 合并;这是维护者追加的发行流程调整,不重新打开 RC 功能精修。此前 Signed Build 40055483436 的两个失败 attempt 均无候选 Artifact,没有重用或发布未知本地 APK。

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 24, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-24T03:20:28.576575Z 3e4f12e PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@thetvplus
thetvplus merged commit a9bf3bf into main Oct 24, 2026
2 checks passed
@thetvplus
thetvplus deleted the devin/a13-release-bootstrap-20261024 branch October 24, 2026 03:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant