fix: make release-v441 publication merge-ready - #2995
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
🛡️ AI Review — Skeptic (security review)VERDICT: SAFE VERY HIGH account-age scrutiny, mitigated by repository admin permission and substantial merged work; no Gittensor association found. Branch: fix/skip-unchanged-sdk-rc → release-v441. Static analysis found the release-workflow changes consistent with the stated behavior. RC publication skips only when both stable package bases exist and fails closed on mixed or indeterminate PyPI state. The PR does not alter AI-review trust instructions, runtime behavior, dependency sources, credential permissions, or author/committer identity. FindingsNo findings. ConclusionNo malicious behavior or security vulnerability was found in the PR-specific changes. 🔍 AI Review — Auditor (domain review)VERDICT: 👍 UNKNOWN Gittensor association; very new account, but repository admin with substantial recent merged contributions. Maximum code scrutiny applied. The implementation matches the description: RC publication occurs only when both stable bases are absent, skips when both exist, and fails closed on mixed or indeterminate PyPI state. The mainnet watcher’s immutable artifact-verification path is restored, generated SDK/docs updates are consistent, and the targeted planner tests plus This PR is the better candidate. Recommend closing #2996. It includes #2996’s quality-gate fixes together with the tested RC planner and associated lockfile/documentation updates. PR #2994 is the intended parent integration branch; the other file overlaps are unrelated generated documentation or release-line changes. FindingsNo findings. ConclusionThe release workflow is internally consistent, tested, and preserves stable-artifact verification while correctly skipping redundant SDK release candidates. |
|
🔄 AI review updated — Skeptic: SAFE Auditor: 👍 |
|
🔄 AI review updated — Skeptic: SAFE Auditor: 👍 |
Summary
Why
The release train must preserve exact stable-artifact verification while avoiding RC publication after both stable Python package bases already exist. This consolidates the release quality-gate fixes into one merge-ready change targeting
release-v441.The planner publishes only when both bases are available, skips only when both are published, and fails closed for mixed or indeterminate PyPI state.
Verification
uv sync --python 3.14 --locked --all-extras --dev: passeduv lock --check: passedcargo fmt --all -- --check: passed-D warnings: passedgit diff --check: passedScope
This PR supersedes #2996 by including its lockfile correction and the remaining release quality-gate fixes.