Adopt the updated release policy

This commit is contained in:
2026-10-09 03:53:18 +00:00
parent 36823c91fb
commit 11c349d9ae
4 changed files with 93 additions and 26 deletions

View File

@@ -1,7 +1,7 @@
# ReleaseKit v0.3.0 Upgrade Roadmap
**Last updated:** 2026-10-08
**Status:** Agreed scope; implementation pending.
**Status:** Release policy adopted; library and toolchain upgrade pending.
## Purpose
@@ -41,6 +41,11 @@ At Audita commit `17421bc5f352f3fdeb67561b2b60b49979822228`:
The initial adoption's [review findings](remediation.md) are resolved. They are
historical context, not additional work for this upgrade.
Since that baseline, Audita has adopted release policy 1.6 and updated its
provenance, policy attribution, and release runbook. The current Go minimum and
selected release toolchain remain 1.25.5. The dependency, tool registration,
bootstrap simplification, and Go 1.26 upgrade described below remain pending.
## Selected Upstream Revisions
Adopt ReleaseKit **v0.3.0**, commit
@@ -56,7 +61,7 @@ structured diagnostics. Audita already uses its module-selected CI bootstrap
approach. The largest file-validation performance gains apply only when those
checks are selected; this upgrade does not enable them merely to obtain gains.
For the release-policy update, use Standard Repository Policies **version 1.6**
The adopted release policy uses Standard Repository Policies **version 1.6**
at commit `e833faddf120c789a9b45348edaf75720de16348`, following its
[adoption guide](https://gitea.maximumdirect.net/eric/policy/src/commit/e833faddf120c789a9b45348edaf75720de16348/docs/adoption.md).
Other locally adopted policies retain their existing upstream revisions.
@@ -118,18 +123,14 @@ tag verification before Go bootstrap and temporary metadata outside the tagged
checkout where the upstream CI template uses it. The local and CI integrations
need not have identical preparation machinery when their responsibilities differ.
### Release Policy and Documentation
### Policy Alignment and Documentation
Update `docs/policy/release.md` using the selected upstream 1.6 revision. Adopt
upstream wording for shared requirements, remove template-only instructions,
and retain Audita's justified platform commitments and accepted native-host
version check. Preserve main-first publication, independent source completion,
and proportionate automated gates. No human release gate is introduced.
Record the adopted version, local update date, and exact per-document upstream
source. Keep mixed-revision policy attribution accurate rather than implying
that the whole policy suite was refreshed. Existing public discovery links and
unrelated policy adoption metadata remain applicable.
The release-policy update is complete. `docs/policy/release.md` now incorporates
the selected upstream 1.6 revision, with template-only instructions removed and
Audita's platform commitments and accepted native-host version check retained.
It preserves independent source completion and proportionate automated gates.
Mixed-revision attribution records the policy's exact source separately from
the other adopted policies. No human release gate was introduced.
Update `docs/release.md` and `docs/development.md` for the source minimum,
selected release toolchain, dependency preparation, and simplified local
@@ -150,8 +151,9 @@ requirement alone does not establish incorporation into Audita binaries.
Update Go runtime and standard-library notices, including relevant vendored
components, for the selected Go 1.26.8 release-build toolchain. Reuse existing
license texts where applicable. Update the copied release policy's scope and
commit-specific source and notice links under the existing OSS policy.
license texts where applicable. The copied release policy's scope and
commit-specific source and notice links have already been updated; preserve
that accurate mixed-revision attribution during the remaining upgrade work.
### Consumer Verification and Test Maintenance