fix: promote verified release manifests #6

Merged

day01 merged %!d() commits from %!s() into %!s()

2026-07-31 18:06:22 +00:00

day01 commented

2026-07-31 16:42:35 +00:00

Owner

Summary

serialize image publications across branches and tags
require release tags to point at the current main commit
promote the already verified main multi-platform manifests for version tags
skip redundant image builds for workflow-only main merges

Verification

repository workflow parser test passed
workflow diff check passed
the current main image publish remains the source of the promoted release manifests

Rationale

The build uses an ephemeral buildx container, so cache mounts do not survive between workflow runs. Rebuilding an unchanged tag would add another cold arm64 QEMU build. Manifest promotion preserves the exact main digests and makes the tag operation deterministic.

## Summary - serialize image publications across branches and tags - require release tags to point at the current main commit - promote the already verified main multi-platform manifests for version tags - skip redundant image builds for workflow-only main merges ## Verification - repository workflow parser test passed - workflow diff check passed - the current main image publish remains the source of the promoted release manifests ## Rationale The build uses an ephemeral buildx container, so cache mounts do not survive between workflow runs. Rebuilding an unchanged tag would add another cold arm64 QEMU build. Manifest promotion preserves the exact main digests and makes the tag operation deterministic.

day01 added 1 commit 2026-07-31 16:42:36 +00:00

fix: promote verified release manifests