5 Commits

Include renames

Author	SHA1	Message	Date
xavierk	b47a65c91e	fix(void): build the xbps release from the tag, not an attached sdist (#37) ... Every release is built from its tag alone by packaging/void/build-release.sh, shared by the tag workflow and local dry runs. Signs in a network-less container with the key mounted read-only and publishes to the tag release and the rolling latest release.	2026-11-06 15:31:47 +00:00
xavierk	180cd4d512	fix(spec16): close the review findings for the Void port (#34) ... Model recommendation keyed to the installed build and free memory, fork-sourced Void templates, signed xbps release workflow on Gitea with the pinned repository key, niri injection guard and wtype-first order, tightened naming sweep, web copy fixes, and CI security and duplication fixes.	2026-11-06 14:13:49 +00:00
soubarnak	e6c9069e0b	fix(void): use concrete release-download URL for xbps client registration ... Replace the self-referential <repo-url-from-release-notes> placeholder in the root README, the release-notes template, and the Void packaging README with the concrete per-tag download prefix the build-xbps job attaches the signed repo to. Static docs default TAG to the current version; release.yml renders github.ref_name at publish time. Fixes #29	2026-11-06 09:42:12 +05:30
soubarnak	da450e32db	fix(void): wire signed xbps repo into release, README, and release process ... Add build-xbps tag job to release.yml: verifies the tag against src/vocalinux/version.py, fails closed when XBPS_SIGNING_KEY is unset, builds and signs via podman-only repo.sh, and attaches packages, signatures, repodata, and client key files to the release. Fold the xbps-repo artifact into publish-checksums (manifest + SHA256SUMS). Document the Void install in the root README (glibc x86_64 scope, fingerprint check, third-party repo caveat) and the post-tag template version/checksum bump as a pull request in docs/RELEASE_PROCESS.md. Proof: local podman run with a throwaway RSA4096 key built all four templates, signed packages + repodata, and verified voculinux installs from the signed repo in a clean rootdir (fingerprint eb:29:5d:9e:5c:94:c1:63:ae:35:cd:35:db:7a:28:da).	2026-11-06 09:15:22 +05:30
soubarnak	9bc04936b6	feat(void): add signed xbps repository pipeline ... Build every template in smoke-gate order, index the full repository and sign packages plus metadata with the RSA4096 key, in the pinned Void container via podman. Fail-closed without a key: no key file, no repo. Ticket #29 (needs #27, #28).	2026-11-06 06:29:22 +05:30