This is an automated email from the ASF dual-hosted git repository. Cole-Greer pushed a commit to branch reproducible-build in repository https://gitbox.apache.org/repos/asf/tinkerpop.git
commit 58c21682deeb3ff717ff1cc11ee433c4fdd3ca14 Author: Cole Greer <[email protected]> AuthorDate: Thu Jul 23 14:51:35 2026 -0700 Exclude maintainer-local .beads state from the source-release distribution --- CHANGELOG.asciidoc | 1 + source-release.xml | 4 ++++ 2 files changed, 5 insertions(+) diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc index 9da08693e8..c4e9cea147 100644 --- a/CHANGELOG.asciidoc +++ b/CHANGELOG.asciidoc @@ -34,6 +34,7 @@ image::https://raw.githubusercontent.com/apache/tinkerpop/master/docs/static/ima * Add Node 26 support for `gremlin-javascript` and `gremlint`. * Enabled reproducible builds by setting `project.build.outputTimestamp`, allowing release distributions to be rebuilt bit-for-bit from a tagged commit. * Added `bin/reproduce-distribution.sh` to independently validate published release artifacts against a clean rebuild from source in a pinned Docker toolchain. +* Excluded maintainer-local `.beads/` state from the source-release distribution so it is no longer packaged into release artifacts. [[release-3-7-6]] === TinkerPop 3.7.6 (Release Date: April 1, 2026) diff --git a/source-release.xml b/source-release.xml index 0909a7197b..fd563e3296 100644 --- a/source-release.xml +++ b/source-release.xml @@ -66,6 +66,10 @@ <exclude>%regex[(?!((?!${project.build.directory}/)[^/]+/)*src/)(.*/)?cobertura\.ser]</exclude> <exclude>**/.DS_Store</exclude> + <!-- beads (bd) maintainer-local issue-tracker state (includes a credential key and runtime files); must never ship in a source release --> + <exclude>.beads/**</exclude> + <exclude>**/.beads/**</exclude> + <!-- release-plugin temp files --> <exclude>%regex[(?!((?!${project.build.directory}/)[^/]+/)*src/)(.*/)?pom\.xml\.releaseBackup]</exclude> <exclude>%regex[(?!((?!${project.build.directory}/)[^/]+/)*src/)(.*/)?release\.properties]</exclude>
