8000 chore(release): merge tag v0.7.1 back into main by norrietaylor · Pull Request #2474 · gominimal/minimal · GitHub
[go: up one dir, main page]

Skip to content

chore(release): merge tag v0.7.1 back into main - #2474

Merged
norrietaylor merged 4 commits into
mainfrom
chore/merge-back-0.7.1
Oct 22, 2026
Merged

norrietaylor merged 4 commits into
mainfrom
chore/merge-back-0.7.1

Conversation

@norrietaylor
Copy link
Copy Markdown
Member

Records the v0.7.1 release history on main so git describe, the release notes and just check-version count from v0.7.1 (release runbook, step 7).

The merge uses -s ours: the tree is identical to main. Nothing on the release branch is lost:

  • The emSign advisory bumps are already on main via #2466 (rustls-webpki 0.103.16, webpki-root-certs 1.0.10 in both lockfiles).
  • The 0.7.1 version bump (#2471) does not apply; main declares 0.8.0.

Merge with "Create a merge commit". Squash or rebase drops the link to the tag.

norrietaylor and others added 4 commits October 15, 2026 09:09
…its tag (#2220)

The publish job looked the release up with `gh release view v<semver>`.
A draft has no tag yet, so the lookup answered 404 for exactly the
release the job exists to publish, and the 0.7.0 promotion failed there.
Publishing a draft without naming tag_name also tags it with the draft's
untagged-<hex> placeholder rather than v<semver>.

The job now finds the release by listing releases and matching
tag_name, refuses when more than one carries the tag, and publishes by
id with tag_name and target_commitish set.
…dvisories (#2466)

RUSTSEC-2026-0382 (rustls-webpki 0.103.15) and RUSTSEC-2026-0383 (webpki-root-certs
1.0.9), both published 2026-10-20, red cargo-deny on every PR. rustls-webpki 0.103.16 rejects
paths through the distrusted emSign intermediates, and webpki-root-certs 1.0.10 drops the emSign
ECC Root CA - G3. Lockfile-only change.

(cherry picked from commit c0ac8c5)
Hotfix release carrying the rustls-webpki and webpki-root-certs bumps
from #2466 (RUSTSEC-2026-0382, RUSTSEC-2026-0383) onto 0.7.0.

Claude-Session: https://claude.ai/code/session_01FnY4WzhrnmSEByMntmqsVF
@minimal-foundry
minimal-foundry Bot commented Oct 21, 2026 •
Copy link
Copy Markdown
Contributor

Approved: no findings at c658d859f411.

Nothing to do.

Clobber: none, since the tree is identical to main.

@minimal-foundry minimal-foundry Bot left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

minimal-review — approved

Verdict APPROVE — No findings.

Panel: 3 of 3 personas ran (correctness, security, supply-chain).

@minimal-foundry minimal-foundry Bot added the review:approved minimal-review approved the current head label Oct 21, 2026
@norrietaylor
norrietaylor added this pull request to the merge queue Oct 22, 2026
Merged via the queue into main with commit 5378e56 Oct 22, 2026
36 checks passed
@norrietaylor
norrietaylor deleted the chore/merge-back-0.7.1 branch October 22, 2026 06:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

review:approved minimal-review approved the current head

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

0