chaokunyang opened a new pull request, #3983:
URL: https://github.com/apache/fory/pull/3983
## Why?
Fory release candidates currently require local source and JVM staging. Issue
#3981 proposed following Pekko's CI release flow, and INFRA-28319 requests
the
repository secrets needed for Fory's signing key and Apache Nexus deployer.
## What does this PR do?
- adds a manually dispatched workflow for immutable `vX.Y.Z-rcN` tags
- builds the existing source release and uploads it to ATR through GitHub
OIDC
- publishes JVM artifacts to Nexus, discovers only repositories created by
the
run, closes them together, and verifies anonymous artifact downloads
- validates all release versions before either publishing job starts and
serializes staging so Nexus repository ownership is unambiguous
- makes CI the default `fory-release` path while retaining manual publication
only when explicitly requested
- keeps release verification in `fory-release`; no duplicate `release-verify`
skill is added
## Related issues
- Refs #3981
- https://issues.apache.org/jira/browse/INFRA-28319
## AI Contribution Checklist
- [x] Substantial AI assistance was used in this PR: `yes`
- [x] The standardized `AI Usage Disclosure` is included below.
- [x] Two fresh reviewers completed the required final clean review on commit
`d8e78968f`.
- [ ] The human submitter has completed the final line-by-line review and
local
verification required before moving this PR out of draft.
AI Usage Disclosure
- substantial_ai_assistance: yes
- scope: design drafting, code drafting, validation, documentation
- affected_files_or_subsystems: GitHub release workflow, `ci/release.py`, and
`.agents/skills/fory-release`
- ai_review: automated line-by-line self-review completed; the Fory-guided
and
independent review loop was repeated after fixes until both reviewers
reported no actionable findings on `d8e78968f`
- ai_review_artifacts: pending persisted PR comment links
- human_verification: pending submitter review; agent-run checks included
Ruff
format/lint, Python compilation and CLI validation, workflow YAML parsing,
skill validation, Nexus discovery/failure-metadata smoke tests, and an
idempotent all-version validation test
- performance_verification: N/A; release tooling and workflow only
- provenance_license_confirmation: the workflow structure follows the
Apache-2.0 Pekko workflow and uses the ASF tooling action; no incompatible
third-party code was introduced
## Does this PR introduce any user-facing change?
- [ ] Does this PR introduce any public API change?
- [ ] Does this PR introduce any binary protocol compatibility change?
## Benchmark
N/A. This change does not touch runtime code.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
