build(desktop): allow controlled unsigned v0.1.0 release
Client Quality Gates / Shared client and Web (push) Has been cancelled
Client Quality Gates / macOS Desktop (push) Has been cancelled
Storage Persistence Guard / storage-persistence-audit (push) Has been cancelled
Client Quality Gates / Shared client and Web (pull_request) Has been cancelled
Client Quality Gates / macOS Desktop (pull_request) Has been cancelled
Storage Persistence Guard / storage-persistence-audit (pull_request) Has been cancelled
Client Quality Gates / Shared client and Web (push) Has been cancelled
Client Quality Gates / macOS Desktop (push) Has been cancelled
Storage Persistence Guard / storage-persistence-audit (push) Has been cancelled
Client Quality Gates / Shared client and Web (pull_request) Has been cancelled
Client Quality Gates / macOS Desktop (pull_request) Has been cancelled
Storage Persistence Guard / storage-persistence-audit (pull_request) Has been cancelled
This commit is contained in:
@@ -305,9 +305,18 @@ Before promoting `main` to `release`, confirm:
|
||||
|
||||
- release checklist is complete
|
||||
- production initialization, build, and smoke verification are complete
|
||||
- Desktop updater signatures are present and verified
|
||||
- platform signing is either complete or the exact version has an approved,
|
||||
checked-in exception in `frontend/desktop-release-policy.json`; the current
|
||||
v0.1.0 exception requires macOS ad-hoc signing, unsigned Windows artifacts,
|
||||
controlled distribution, and explicit trust warnings
|
||||
- rollback or remediation path is clear
|
||||
- release tag has been prepared
|
||||
|
||||
Platform signing remains the default for versions without an exact approved
|
||||
exception. An exception never permits disabling Tauri updater signatures or
|
||||
building Web, macOS, and Windows from different tags or commits.
|
||||
|
||||
Reference:
|
||||
|
||||
- [docs/guides/release-checklist.md](guides/release-checklist.md)
|
||||
|
||||
Reference in New Issue
Block a user