Skip to content

Build: Verify release using dist repo tarball #5720

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 5 commits into
base: 3.x-stable
Choose a base branch
from
Open

Build: Verify release using dist repo tarball #5720

wants to merge 5 commits into from
+76 −16

Conversation

@timmywil
Copy link
Member

@timmywil timmywil commented Nov 1, 2025 •
edited
Loading

Summary

3.x version of #5719

  • Builds the tarball using the dist repo after running npm run release:dist from the build.
  • Pulls the blog URL from the dist repo README
  • Update the default Node in workflows to 24.x, which is now in LTS
  • Ensure all commits and tags are signed. This change was prompted when I noticed the tag on jquery/jquery for 4.0.0-rc.1 was not signed. We were already signing the tag for jquery-dist, and the team signs commits with global git config, but release-it does not sign tags by default.
  • If the tag does not yet exist in the dist repo (which can happen as a race condition during the release), it falls back to cloning the main branch. That should still work.

Ref gh-5693

Note: this doesn't work for any previous 3.x release, but it should work for any future ones.

Checklist

@timmywil timmywil requested a review from mgol November 1, 2025 18:52
mgol
mgol previously approved these changes Nov 7, 2025
View reviewed changes
Copy link
Member

@mgol mgol left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM assuming you tested it locally.

@mgol mgol added this to the 3.8.0 milestone Nov 7, 2025
@mgol mgol added the Build label Nov 7, 2025
@timmywil
Copy link
Member Author

timmywil commented Nov 10, 2025

@mgol I realized there could be a race condition. Because the dist tag is pushed after the main repo tag, it could run the workflow before the dist tag exists. I made it so it falls back to cloning the main branch. This should make it so verify works during a release whether the tag is there or not, but still support verifying previous releases (>= 4.0.0-rc.1).

@timmywil timmywil requested a review from mgol November 10, 2025 16:55
@mgol mgol dismissed their stale review November 10, 2025 17:54

More changes are coming so I'll dismiss my review for now.

@mgol mgol linked an issue Nov 12, 2025 that may be closed by this pull request
Fix release verification #5693
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mgol mgol mgol approved these changes

Assignees

No one assigned

Labels

Build

Milestone

3.8.0

Development

Successfully merging this pull request may close these issues.

Fix release verification

2 participants

@timmywil @mgol