fix(ci): sign auto-tags via GitHub API and handle missing seed tag#11
Merged
persimmon16 merged 1 commit intomainfrom Apr 1, 2026
Merged
fix(ci): sign auto-tags via GitHub API and handle missing seed tag#11persimmon16 merged 1 commit intomainfrom
persimmon16 merged 1 commit intomainfrom
Conversation
Two fixes for the Release Auto-Tag workflow: 1. Bootstrap support: when no v*.*.* tags exist, seed from v0.0.0 so the first auto-tag creates v0.0.1 instead of failing. 2. Signed tags: replace lightweight `git tag` + `git push` with GitHub's Git database API (gh api git/tags + git/refs), which creates annotated tag objects signed by the token identity. Tags now show as "Verified" in the GitHub UI.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
v*.*.*tags exist in the repo, seed fromv0.0.0so the first auto-tag createsv0.0.1instead of failing with "No existing v*.. tags found"git tag+git pushwith GitHub's Git database API (gh api git/tags+git/refs), which creates annotated tag objects signed by the token identity — tags now show as "Verified" in the GitHub UITest plan
Release Auto-Tagworkflow viaworkflow_dispatchon this branchv0.0.1(bootstrap from no tags)