also looking at this

fix(release): gate registry notification on final artifact checks

#305

Merged glennmichael123 wants to merge codex/release-integration-checks into main

6 files +104 -14

glennmichael123 9 days ago

Summary

Gate registry indexing on final manifest verification, both macOS download smoke tests, and verified SBOM attachment.
Keep registry networking best-effort without masking failures in the preceding release gates.
Add semantic workflow regressions and reject metadata-only or empty CycloneDX/SPDX inventories.
Validate required SBOM documents before artifact upload instead of printing errors and continuing.

Rebased onto main after #294, #297, #299 and #300 merged; the two remaining commits are patch-equivalent to the previously green branch.
14 release/SBOM/scanner regression tests pass (92 assertions), with Pickier, actionlint and diff checks passing.
Fresh CI is required for the rebased head.

The prerequisites are now on main. No release is published by this PR.

6 changed files on the files tab, with 0 review threads.