diff options
| -rw-r--r-- | .codex/skills/herdr-pre-release-audit/references/pre-release-audit.md | 4 | ||||
| -rw-r--r-- | .pi/prompts/pre-release-audit.md | 4 | ||||
| -rw-r--r-- | nix/package.nix | 2 |
3 files changed, 9 insertions, 1 deletions
diff --git a/.codex/skills/herdr-pre-release-audit/references/pre-release-audit.md b/.codex/skills/herdr-pre-release-audit/references/pre-release-audit.md index 4858f598..3e851d54 100644 --- a/.codex/skills/herdr-pre-release-audit/references/pre-release-audit.md +++ b/.codex/skills/herdr-pre-release-audit/references/pre-release-audit.md @@ -70,6 +70,7 @@ Process: 8. Verify finalization state. - Before `just release`, approved `docs/next/README.md` must be copied to root `README.md`, approved staged website docs must be copied from `docs/next/website/src/content/docs/` to `website/src/content/docs/`, and the deleted root doc files must stay deleted. + - If the release will change `Cargo.lock` or the package version, check `nix/package.nix` after the release version bump and refresh `cargoHash` before tagging. A stale hash fails both the `Nix` workflow and the release workflow's `flake-check` job with a fixed-output derivation mismatch. Use the `got:` hash printed by `nix flake check --print-build-logs` or CI, then rerun the Nix check when available. - Run or recommend: ```bash just release-docs-check @@ -112,6 +113,9 @@ Accepted/no action: Root docs finalized: YES | NO <result of just release-docs-check or why it was not run> +Nix cargoHash: OK | NEEDS UPDATE | NOT CHECKED +<result of nix flake check or the hash-refresh status> + Required before release: 1. <short action> ``` diff --git a/.pi/prompts/pre-release-audit.md b/.pi/prompts/pre-release-audit.md index 4858f598..3e851d54 100644 --- a/.pi/prompts/pre-release-audit.md +++ b/.pi/prompts/pre-release-audit.md @@ -70,6 +70,7 @@ Process: 8. Verify finalization state. - Before `just release`, approved `docs/next/README.md` must be copied to root `README.md`, approved staged website docs must be copied from `docs/next/website/src/content/docs/` to `website/src/content/docs/`, and the deleted root doc files must stay deleted. + - If the release will change `Cargo.lock` or the package version, check `nix/package.nix` after the release version bump and refresh `cargoHash` before tagging. A stale hash fails both the `Nix` workflow and the release workflow's `flake-check` job with a fixed-output derivation mismatch. Use the `got:` hash printed by `nix flake check --print-build-logs` or CI, then rerun the Nix check when available. - Run or recommend: ```bash just release-docs-check @@ -112,6 +113,9 @@ Accepted/no action: Root docs finalized: YES | NO <result of just release-docs-check or why it was not run> +Nix cargoHash: OK | NEEDS UPDATE | NOT CHECKED +<result of nix flake check or the hash-refresh status> + Required before release: 1. <short action> ``` diff --git a/nix/package.nix b/nix/package.nix index a4a81817..06887149 100644 --- a/nix/package.nix +++ b/nix/package.nix @@ -42,7 +42,7 @@ rustPlatform.buildRustPackage { ); }; - cargoHash = "sha256-yRT31RnfjSQy5bxFXVvM9zRM59WAPrBozu3S2tag6s8="; + cargoHash = "sha256-YseT5O69ld88SoZYPgMR/qz7djfKCdyuJkOGkHdv97A="; cargoDepsName = "herdr"; nativeBuildInputs = [ |