Skip to content

Handle repeated publication of identical release packages - #3

Merged
Alox1d merged 2 commits into
mainfrom
fix/release-idempotency
Oct 15, 2026
Merged

Alox1d merged 2 commits into
mainfrom
fix/release-idempotency

Conversation

@Alox1d

@Alox1d Alox1d commented Oct 15, 2026

Copy link
Copy Markdown
Owner

The main build passed, but publishing an unchanged 2.0.1 package failed after history cleanup changed its commit identity. Reuse an existing stable release only after checking its tag, all three assets, and every payload file; pin the anonymous updater probe to the verified published commit and manifest digest.

Changed same-version payloads, tampered archives, unexpected files, wrong tags, and prereleases remain rejected without modifying published assets. The runtime and version are unchanged.

Validation: Windows PowerShell 5.1 passed all 11 native test suites, the expected QuickEdit baseline, and the actual package build. New regressions cover identical retries, rewritten history, changed ZIP metadata, changed/tampered payloads, extra entries, wrong tags, and prereleases.

@Alox1d
Alox1d merged commit 27367e9 into main Oct 15, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant