Skip to content

fix(build): make release publishing repeatable - #134

Merged
robinbraemer merged 1 commit into
mainfrom
fix/reproducible-release-publishing
Aug 8, 2026
Merged

fix(build): make release publishing repeatable#134
robinbraemer merged 1 commit into
mainfrom
fix/reproducible-release-publishing

Conversation

@robinbraemer

Copy link
Copy Markdown
Member

A retry of the 0.15.1 release rebuilt different JAR bytes, overwrote the versioned GitHub assets, and could no longer verify them against the immutable Hangar version.

This change:

  • makes every Gradle archive reproducible
  • prevents release retries from overwriting versioned GitHub assets
  • keeps latest and latest-prerelease movable
  • lets Modrinth continue when Hangar alone fails, but only after GitHub release verification succeeds
  • adds regression tests for each safety property

Local checks: YAML parse and git diff --check pass. Full tests run in the JDK 17/21 matrix because this host has no Java runtime.

@robinbraemer
robinbraemer merged commit a4b6934 into main Aug 8, 2026
2 checks passed
@robinbraemer
robinbraemer deleted the fix/reproducible-release-publishing branch August 8, 2026 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant