feat(release): build the release pipeline for the seven FFI packages - #878

Merged

tobyhede merged 17 commits into

mainfrom

feat/protect-ffi-5-release-pipeline

Aug 12, 2026

Commits on Aug 10, 2026

chore(protect-ffi): mark the crate publish = false
tobyhede
committed
dc6db45
chore(protect-ffi): point the manifests at cipherstash/stack
tobyhede
committed
6ce8481
feat(release): gate publishing on registry state
tobyhede
committed
a9210f6

Commits on Aug 11, 2026

ci: add the reusable FFI artifact build workflow
tobyhede
committed
3f6ca3e
ci(release): publish FFI tarballs, tagged, before changeset publish
tobyhede
committed
c1a4029
ci: gate the release machinery on actionlint and script tests
tobyhede
committed
37c89ec
ci: add the FFI pack-and-install pre-flight
tobyhede
committed
54fd265
ci: retire the deposited upstream workflows
tobyhede
committed
872f6f9
docs(release): record the FFI publish path in the plan and the supply-chain skill
tobyhede
committed
cf08c3b
fix(release): close the review findings on caching, checksums and tag lookup
tobyhede
committed
599fafd
docs(supply-chain): name each action's cache input and its real default
tobyhede
committed
80f3cd5
docs(supply-chain): correct how npm validates a trusted publish through workflow_call
tobyhede
committed
52e39ad
refactor(release): cut wasted CI work and collapse the duplicated guards
tobyhede
committed
84eef2c
fix(supply-chain): split shell separators before checking an install is pinned
tobyhede
committed
81d0943
refactor(release): drop the gate's install, and stop three checks re-typing what they check
tobyhede
committed
f7bd395

Commits on Aug 12, 2026