You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@magpie.apache.org by po...@apache.org on 2026/10/16 03:18:09 UTC
(magpie) branch perf/release-mgmt-5-prepare updated (c4ee37c1 -> c6fc2a57)
This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a change to branch perf/release-mgmt-5-prepare
in repository https://gitbox.apache.org/repos/asf/magpie.git
omit c4ee37c1 perf(release-prepare): plan, prep, post and the signing setup as code
omit 6a096bd0 perf(release-promote, release-announce-draft): render the promotion and announcement as code
omit 0853cffe perf(release-vote-draft, release-vote-tally): render the vote drafts and decide the tally as code
omit d2376499 perf(release-verify-rc): classify RAT, JVM, Nexus and reproducibility results as code
omit fce0440f fix(release-management): quote every configured value in the rendered commands
omit a2fc8d4d perf(release-rc-cut): render the RC command blocks as code, one file per outcome
omit 33af92b7 test(agent-isolation): keep the wrapped-signer variable out of the probe tests
add 3846714d fix(keys-sync): require a compliant signing-capable key for the verdict (#1635)
add b298450a Docs/issue 1069 mailing lists (#1629)
add ea07a9fe fix(setup): detect the security list on adopt instead of assuming one (#1623)
add 5ef20f03 fix(issue-reassess-stats): pin nature counting in step-2 classify eval spec (#1615)
add d09de641 fix(keys-sync): report GPG execution failures (#1634)
add 41f1cb40 fix(setup): run check-upgrade.sh via bash to avoid execute permission dependency (#1645)
add b1f6e340 fix(keys-sync): use datetime.UTC in the near-expiry test (ruff UP017) (#1646)
add b947598a fix(agent-guard): recognize the +refspec force spelling in the empty-rebase guard (#1607)
add 7ce2f542 test(agent-isolation): keep the wrapped-signer variable out of the probe tests
add 5e8c95c5 perf(release-rc-cut): render the RC command blocks as code, one file per outcome
add fab31e56 fix(release-management): quote every configured value in the rendered commands
add 250c039f fix(release-rc-cut): fail closed where the rendered commands and record could mislead
add b6dacacf fix(release-rc-cut): render runnable commands for every backend and self-check
add a4375d6d perf(release-verify-rc): classify RAT, JVM, Nexus and reproducibility results as code
add 9350d44d fix(release-verify-rc): run Step 7 as documented and stop false PASS / SKIP / FAIL
add 39781974 fix(release-verify-rc): never PASS on missing evidence or misread entries
add 7eb9d47a perf(release-vote-draft, release-vote-tally): render the vote drafts and decide the tally as code
add efc7a20e fix(release-vote-draft, release-vote-tally): fail closed on incomplete input and scan the whole public text
add 65ce7cce fix(release-vote-draft, release-vote-tally): count each reviewer's latest decision and label the source digest
add e9ee6832 perf(release-promote, release-announce-draft): render the promotion and announcement as code
add a2f3443a fix(release-promote, release-announce-draft): emit the right S3 move and gate render on the verdict
add 690f7946 fix(release-promote): withhold held artefacts for real and scope the verdict to its project
add 7012fdb1 perf(release-prepare): plan, prep, post and the signing setup as code
add 23602201 fix(release-prepare): keep LICENSE and NOTICE in the archive and stop silent passes
add c6fc2a57 fix(release-prepare): protect configured voter inputs and settle reference checks
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (c4ee37c1)
\
N -- N -- N refs/heads/perf/release-mgmt-5-prepare (c6fc2a57)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
docs/index.md | 2 +
docs/mailing-lists.md | 54 +++
.../tools/agent-guard/src/agent_guard/__init__.py | 8 +-
.../skills/announce-draft/SKILL.md | 4 +-
.../skills/keys-sync/scripts/check_key.py | 238 ++++++++---
.../skills/keys-sync/tests/test_check_key.py | 456 ++++++++++++++++++++-
.../skills/prepare/SKILL.md | 4 +-
.../skills/prepare/archive-review.md | 13 +-
.../skills/prepare/post.md | 8 +-
.../skills/prepare/prep.md | 20 +-
.../skills/promote/SKILL.md | 26 +-
.../skills/promote/backends/github-releases.md | 8 +-
.../skills/promote/backends/s3.md | 7 +-
.../skills/promote/backends/self-hosted.md | 3 +
.../skills/promote/backends/svnpubsub.md | 4 +
.../skills/promote/convenience-artefacts.md | 10 +
.../skills/promote/outcomes/handoff-non-pmc.md | 2 +-
.../skills/rc-cut/SKILL.md | 27 +-
.../skills/rc-cut/ci-signed.md | 3 +-
.../skills/rc-cut/classifications/refused.md | 4 +-
.../skills/rc-cut/classifications/stage-atr.md | 16 +-
.../skills/rc-cut/reproducibility-self-check.md | 22 +-
.../skills/verify-rc/SKILL.md | 2 +-
.../skills/verify-rc/nexus-staging.md | 1 +
.../skills/verify-rc/reproducibility.md | 3 +-
.../skills/vote-draft/SKILL.md | 7 +-
.../skills/vote-draft/canned-body.md | 8 +-
.../skills/vote-tally/SKILL.md | 7 +-
.../skills/vote-tally/mechanisms/pr-approval.md | 15 +-
plugins/magpie-setup/hooks/hooks.json | 2 +-
plugins/magpie-setup/skills/setup/adopt.md | 22 +
plugins/magpie-setup/skills/setup/install.md | 4 +-
.../setup/setup_preflight/isolated_fingerprint.py | 2 +-
plugins/magpie-setup/templates/project.md | 2 +-
tools/agent-guard/src/agent_guard/__init__.py | 8 +-
tools/agent-guard/tests/test_guards.py | 34 ++
tools/release-config/README.md | 2 +-
tools/release-config/src/release_config/config.py | 40 +-
.../release-config/src/release_config/mdconfig.py | 7 +-
tools/release-config/tests/test_load.py | 41 ++
tools/release-management/README.md | 43 +-
.../release_management/announce_draft/render.py | 15 +-
.../src/release_management/prepare/archive.py | 130 ++++--
.../src/release_management/prepare/cli.py | 44 +-
.../src/release_management/prepare/plan.py | 4 +-
.../src/release_management/prepare/prep.py | 54 ++-
.../src/release_management/prepare/signing.py | 14 +-
.../src/release_management/promote/cli.py | 33 +-
.../src/release_management/promote/render.py | 335 +++++++++++++--
.../src/release_management/rc_cut/cli.py | 42 +-
.../src/release_management/rc_cut/render.py | 270 +++++++++---
.../src/release_management/shell.py | 11 +-
.../src/release_management/verify_rc/checks.py | 3 +-
.../src/release_management/verify_rc/cli.py | 7 +-
.../src/release_management/verify_rc/jvm.py | 35 +-
.../src/release_management/verify_rc/nexus.py | 52 ++-
.../src/release_management/verify_rc/report.py | 19 +-
.../src/release_management/verify_rc/repro.py | 26 +-
.../src/release_management/vote_draft/render.py | 122 +++++-
.../src/release_management/vote_tally/cli.py | 27 +-
.../src/release_management/vote_tally/render.py | 29 ++
.../src/release_management/vote_tally/tally.py | 95 ++++-
.../tests/test_announce_draft.py | 52 ++-
tools/release-management/tests/test_integration.py | 53 ++-
tools/release-management/tests/test_prepare.py | 320 ++++++++++++++-
tools/release-management/tests/test_promote.py | 451 ++++++++++++++++++--
tools/release-management/tests/test_rc_cut.py | 373 ++++++++++++++++-
tools/release-management/tests/test_shell.py | 18 +-
tools/release-management/tests/test_verify_rc.py | 207 +++++++++-
tools/release-management/tests/test_vote_draft.py | 165 +++++++-
tools/release-management/tests/test_vote_tally.py | 183 ++++++++-
tools/skill-evals/README.md | 2 +-
.../step-2-classify/fixtures/output-spec.md | 2 +
.../case-3-notice-removal-unjustified/report.md | 4 +-
.../fixtures/case-4-target-url-exists/report.md | 13 +-
.../step-0-preflight/fixtures/output-spec.md | 2 +-
.../case-4-injection-in-planning-issue/report.md | 2 +-
.../step-2-emit-commands/fixtures/output-spec.md | 2 +-
tools/skill-evals/evals/setup/README.md | 3 +-
.../case-1-dedicated-list-listed}/case-meta.json | 0
.../case-1-dedicated-list-listed/expected.json | 1 +
.../case-1-dedicated-list-listed/report.md | 11 +
.../case-2-no-dedicated-list}/case-meta.json | 0
.../case-2-no-dedicated-list/expected.json | 1 +
.../fixtures/case-2-no-dedicated-list/report.md | 10 +
.../fixtures/case-3-non-asf}/case-meta.json | 0
.../fixtures/case-3-non-asf/expected.json | 1 +
.../fixtures/case-3-non-asf/report.md | 5 +
.../case-4-conflicting-evidence}/case-meta.json | 0
.../case-4-conflicting-evidence/expected.json | 1 +
.../fixtures/case-4-conflicting-evidence/report.md | 11 +
.../adopt-security-list/fixtures/output-spec.md | 26 ++
.../adopt-security-list/fixtures/step-config.json | 4 +
.../fixtures/user-prompt-template.md | 9 +
94 files changed, 4038 insertions(+), 450 deletions(-)
create mode 100644 docs/mailing-lists.md
mode change 100755 => 100644 plugins/magpie-release-management/skills/keys-sync/scripts/check_key.py
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/adopt-security-list/fixtures/case-1-dedicated-list-listed}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/case-1-dedicated-list-listed/expected.json
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/case-1-dedicated-list-listed/report.md
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/adopt-security-list/fixtures/case-2-no-dedicated-list}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/case-2-no-dedicated-list/expected.json
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/case-2-no-dedicated-list/report.md
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/adopt-security-list/fixtures/case-3-non-asf}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/case-3-non-asf/expected.json
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/case-3-non-asf/report.md
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/adopt-security-list/fixtures/case-4-conflicting-evidence}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/case-4-conflicting-evidence/expected.json
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/case-4-conflicting-evidence/report.md
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/output-spec.md
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/step-config.json
create mode 100644 tools/skill-evals/evals/setup/adopt-security-list/fixtures/user-prompt-template.md