v30.3-roots.1 · Commit 67: [PATCH 67/68] fix(release): defer expanded dependency notice coverage
contrib/roots/README.md
Before: contrib/roots/README.md · After: contrib/roots/README.md
File metadata
index 18553e5d69d5dc481f31305418f8d10a847ba097..f73a705940da9066b75ec17684c732f57a282fb6 100644
Download original patch · Release notes
Diff rows 1–24 of 24. Line numbers refer to the original before/after files.
+ Added− RemovedUnmarked lines are context.
Scroll the code area horizontally to read long lines. The two line-number columns refer to before and after.
contrib/roots/README.md
CHANGED
|
@@ -280,7 +280,7 @@ ci/release/validate-release-source.sh "$release_tag"
|
|
|
280
280
|
```
|
|
281
281
|
|
|
282
282
|
Run the retained CI/release metadata tests before pushing (this includes signing,
|
|
283
|
-
portable-patch replay, runner notices and signed-draft gates):
|
|
283
|
+
portable-patch replay, archive/COPYING and signed-draft gates):
|
|
284
284
|
|
|
285
285
|
```sh
|
|
286
286
|
python3 -m unittest discover -s ci/test
|
|
@@ -312,11 +312,11 @@ those bytes. Replay verification uses the same command and checks tree equality
|
|
|
312
312
|
outside `.github/**`.
|
|
313
313
|
|
|
314
314
|
Both workflow paths build Linux x86_64/aarch64, macOS x86_64/arm64 and Windows
|
|
315
|
-
x86_64 packages, collecting exact installed dependency notices in each runner
|
|
316
|
-
before archive upload. Linux uses pinned verified depends sources, macOS uses
|
|
317
|
-
matching installed Homebrew receipts/source hashes and actual bundle linkage,
|
|
318
|
-
and Windows uses installed static-triplet port copyrights/versions. Missing or
|
|
319
|
-
mismatched evidence fails. See `ci/release/README.md` for the collection interface.
|
|
315
|
+
x86_64 packages, preserving existing project license files and staging canonical
|
|
316
|
+
`COPYING` before archive upload. The user deferred expanded dependency
|
|
317
|
+
copyright/REUSE coverage to future releases. Dependency notice collection and
|
|
318
|
+
its schema are optional tooling, not a current release gate; no complete
|
|
319
|
+
coverage claim is made. See `ci/release/README.md` for that optional interface.
|
|
320
320
|
|
|
321
321
|
The tag-only `release` environment job waits for all five builds and the patch,
|
|
322
322
|
downloads only its own run's outputs and runs `prepare-release.sh`. It requires
|