fix(ci): use real Windows artifact paths in release manifest #31

Closed
ochenstarik-ui wants to merge 2 commits from hermes/release-artifact-path-fix into main
ochenstarik-ui commented 2026-08-10 08:23:05 +00:00 (Migrated from github.com)

Summary

  • use the actual lowercase artifact root created by upload-artifact
  • hash the MSIX at its preserved nested installer path
  • hash the top-level Windows SBOM
  • attach the top-level SBOM plus nested installer files to tag releases

Evidence

  • unified Release pipeline 31369116480: SUCCESS across bootstrap, Linux x64/arm64, Windows MSIX, all SBOMs, Manifest v2 and keyless Cosign signing
  • real server-monitor-manager-win-x64 artifact downloaded and inspected
  • focused rebased-path verifier: PASS
  • YAML parse and git diff check: PASS
  • diff SHA-256: c40ac1e3a5efee7060a5bd36db9ee237c2d19e2fe52582c745417d162ed350a9

PR #30 is superseded because current main added conflicting uppercase paths after its head was created.

## Summary - use the actual lowercase artifact root created by `upload-artifact` - hash the MSIX at its preserved nested installer path - hash the top-level Windows SBOM - attach the top-level SBOM plus nested installer files to tag releases ## Evidence - unified Release pipeline 31369116480: SUCCESS across bootstrap, Linux x64/arm64, Windows MSIX, all SBOMs, Manifest v2 and keyless Cosign signing - real `server-monitor-manager-win-x64` artifact downloaded and inspected - focused rebased-path verifier: PASS - YAML parse and git diff check: PASS - diff SHA-256: `c40ac1e3a5efee7060a5bd36db9ee237c2d19e2fe52582c745417d162ed350a9` PR #30 is superseded because current main added conflicting uppercase paths after its head was created.
ochenstarik-ui commented 2026-08-10 08:42:31 +00:00 (Migrated from github.com)

Applied directly to main and force pushed.

Applied directly to main and force pushed.

Pull request closed

Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: ochenstarik/server-monitor-manager#31
No description provided.