This is an automated email from the ASF dual-hosted git repository. erickguan pushed a commit to branch secure-release in repository https://gitbox.apache.org/repos/asf/opendal.git
commit 37391e07380b07379048bcc52543bdde91a20bd7 Author: Erick Guan <[email protected]> AuthorDate: Mon Jul 6 09:49:30 2026 +0800 Tighten ruby release process --- .github/workflows/release_ruby.yml | 18 ++++++++---------- 1 file changed, 8 insertions(+), 10 deletions(-) diff --git a/.github/workflows/release_ruby.yml b/.github/workflows/release_ruby.yml index c7909c419..01119313b 100644 --- a/.github/workflows/release_ruby.yml +++ b/.github/workflows/release_ruby.yml @@ -28,7 +28,12 @@ on: - main paths: - ".github/workflows/release_ruby.yml" - workflow_dispatch: # allow repo collaborators to publish gem + # Rubygems follows pre-release tags on a public registry. But OpenDAL doesn't + # want pre-releases to a publish registry beyond a release process. For now, + # we rely on artifacts for testing pre-releases. We could consider a GitHub + # private registry for pre-releases in the future. + # + # omits `workflow_dispatch` to tighten this release workflow. concurrency: group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }} @@ -156,15 +161,8 @@ jobs: retention-days: 30 publish: - # allow: - # - standard tag releases - # - workflow_dispatch: - # - reattempt standard tag releases - # - pre-releases - - if: >- - startsWith(github.ref, 'refs/tags/v') || - (github.event_name == 'workflow_dispatch' && contains(needs.build.outputs.version, 'rc')) + # allow tag releases + if: startsWith(github.ref, 'refs/tags/v') needs: [build, build-native] runs-on: ubuntu-latest
