(opendal) branch secure-release created (now 37391e073)

[er...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

erickguan pushed a change to branch secure-release
in repository https://gitbox.apache.org/repos/asf/opendal.git


      at 37391e073 Tighten ruby release process

This branch includes the following new commits:

     new 37391e073 Tighten ruby release process

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(opendal) 01/01: Tighten ruby release process

[er...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

erickguan pushed a commit to branch secure-release
in repository https://gitbox.apache.org/repos/asf/opendal.git

commit 37391e07380b07379048bcc52543bdde91a20bd7
Author: Erick Guan <29...@users.noreply.github.com>
AuthorDate: Mon Jul 6 09:49:30 2026 +0800

    Tighten ruby release process
---
 .github/workflows/release_ruby.yml | 18 ++++++++----------
 1 file changed, 8 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/release_ruby.yml b/.github/workflows/release_ruby.yml
index c7909c419..01119313b 100644
--- a/.github/workflows/release_ruby.yml
+++ b/.github/workflows/release_ruby.yml
@@ -28,7 +28,12 @@ on:
       - main
     paths:
       - ".github/workflows/release_ruby.yml"
-  workflow_dispatch: # allow repo collaborators to publish gem
+  # Rubygems follows pre-release tags on a public registry. But OpenDAL doesn't
+  # want pre-releases to a publish registry beyond a release process. For now,
+  # we rely on artifacts for testing pre-releases. We could consider a GitHub
+  # private registry for pre-releases in the future.
+  # 
+  # omits `workflow_dispatch` to tighten this release workflow.
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
@@ -156,15 +161,8 @@ jobs:
           retention-days: 30
 
   publish:
-    # allow:
-    # - standard tag releases
-    # - workflow_dispatch:
-    #   - reattempt standard tag releases
-    #   - pre-releases
-
-    if: >-
-      startsWith(github.ref, 'refs/tags/v') ||
-        (github.event_name == 'workflow_dispatch' && contains(needs.build.outputs.version, 'rc'))
+    # allow tag releases
+    if: startsWith(github.ref, 'refs/tags/v')
 
     needs: [build, build-native]
     runs-on: ubuntu-latest