ci(release): Switch from action-prepare-release to Craft by BYK · Pull Request #5527 · getsentry/relay

BYK · 2026-01-09T17:57:28Z

Summary

This PR migrates from the deprecated action-prepare-release to the new Craft GitHub Actions.

Changes

Migrated .github/workflows/release_binary.yml to Craft reusable workflow
Updated .craft.yml with versioning.policy: calver

Documentation

See https://getsentry.github.io/craft/github-actions/ for more information.

This PR migrates from the deprecated action-prepare-release to the new Craft GitHub Actions (reusable workflow or composite action). Changes: - Migrate .github/workflows/release_library.yml to Craft reusable workflow

github-actions · 2026-01-09T17:58:22Z

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

New Features ✨

(config) Allow loading config values from a file by Dav1dde in #5531
(eap) Add support for native scalar arrays by Dav1dde in #5394

Bug Fixes 🐛

(event-normalization) Also normalize trace context as well as all spans by constantinius in #5515
(spans) Mark root spans as segments in OTel conversion by mjq in #5532
(store) Flip byte order of UUIDs by jjbayer in #5526

Build / dependencies / internal 🔧

(deps) Update rdkafka to 0.38 with librdkafka 2.10 by Dav1dde in #5523
(profile-chunks) Move profile chunks to new processing pipeline by Dav1dde in #5505

(release) Switch from action-prepare-release to Craft by BYK in #5527

(server) Return status code 413 if envelope is rejected due to size limits by Dav1dde in #5474
(spans) Add additional tags to usage/count per root by Dav1dde in #5511

_{🤖 This preview updates automatically when you update the PR.}

The previous migration incorrectly removed the GitHub App token authentication step. This commit restores it by switching to the composite action pattern which preserves the auth flow.

.github/workflows/release_binary.yml

.github/workflows/beta.yml

.github/workflows/release_binary.yml

Dav1dde · 2026-01-12T08:02:22Z

.github/workflows/changelog-preview.yml

+name: Changelog Preview
+on:
+  pull_request:
+    types:
+    - opened
+    - synchronize
+    - reopened
+    - edited
+    - labeled
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  changelog-preview:
+    uses: getsentry/craft/.github/workflows/changelog-preview.yml@v2
+    secrets: inherit


I don't think we want this, also it does not use the changelog.md we actually curate.

Yeah this only makes sense if you are using automated changelogs. Happy to remove but I also recommend giving automated changelogs a shot. It allows curation too: https://getsentry.github.io/craft/configuration/#custom-changelog-entries-from-pr-descriptions

I am interested about the automated snapshots, but I'd like to review/look into that separately. From your presentation it sounds like the automated changelogs can possibly do what we're interested in now, but we still have a few workflows tied to the manual process.

.github/workflows/changelog.yml

BYK · 2026-01-12T12:46:17Z

.github/workflows/release_binary.yml

        with:
-          version: ${{ github.event.inputs.version }}
-          force: ${{ github.event.inputs.force }}
+          version: ${{ inputs.version }}
+          force: ${{ inputs.force }}
          calver: true


@Dav1dde do we still have calver + semver in Relay

Calver for self-hosted and binary releases, semver for (Python) library releases

.github/workflows/changelog-preview.yml

.github/workflows/release_library.yml

+    - name: Prepare release
+      uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce # v2
+      env:
+        GITHUB_TOKEN: ${{ steps.token.outputs.token }}
+      with:
+        version: ${{ inputs.version }}
+        force: ${{ inputs.force }}
+        path: py


.github/workflows/release_binary.yml

+        uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce # v2
        env:
          GITHUB_TOKEN: ${{ steps.token.outputs.token }}
        with:
-          version: ${{ github.event.inputs.version }}
-          force: ${{ github.event.inputs.force }}
+          version: ${{ inputs.version }}
+          force: ${{ inputs.force }}
          calver: true


.github/workflows/release_library.yml

+    - name: Prepare release
+      uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce # v2
+      env:
+        GITHUB_TOKEN: ${{ steps.token.outputs.token }}
+      with:
+        version: ${{ inputs.version }}
+        force: ${{ inputs.force }}
+        path: py


.github/workflows/release_library.yml

+        uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce
        env:
          GITHUB_TOKEN: ${{ steps.token.outputs.token }}
        with:


cursor · 2026-01-14T11:52:33Z

.craft.yml

+- /^relay-Windows-x86_64-pdb.zip$/
+- /^relay-Windows-x86_64\.exe$/
+versioning:
+  policy: calver


Global calver policy incorrectly applies to semver library releases

Medium Severity

The global versioning.policy: calver setting in .craft.yml applies to all releases, but the Python library releases (via release_library.yml with path: py) require semver versioning according to the PR discussion. The library release workflow has no mechanism to override this global calver policy, potentially causing version validation issues or incorrect version handling for Python library releases.

Additional Locations (1)

.github/workflows/release_library.yml#L31-L38

BYK requested a review from a team as a code owner January 9, 2026 17:57

ci(release): Switch from action-prepare-release to Craft

1736a75

This PR migrates from the deprecated action-prepare-release to the new Craft GitHub Actions (reusable workflow or composite action). Changes: - Migrate .github/workflows/release_library.yml to Craft reusable workflow

BYK force-pushed the ci/migrate-to-craft-action branch from 64b9e3e to 1736a75 Compare January 9, 2026 17:57

BYK added 2 commits January 9, 2026 23:04

ci(release): Restore GitHub App token authentication

2af3714

The previous migration incorrectly removed the GitHub App token authentication step. This commit restores it by switching to the composite action pattern which preserves the auth flow.

ci(release): Restore GitHub App token authentication

c6c86bb

The previous migration incorrectly removed the GitHub App token authentication step. This commit restores it by switching to the composite action pattern which preserves the auth flow.

cursor bot reviewed Jan 9, 2026

View reviewed changes

.github/workflows/release_binary.yml Outdated Show resolved Hide resolved

fix: Pin actions to SHA and add permissions blocks

e876603

cursor bot reviewed Jan 10, 2026

View reviewed changes

.github/workflows/beta.yml Outdated Show resolved Hide resolved

fix: Add calver: true configuration for CalVer releases

3720f92

cursor bot reviewed Jan 10, 2026

View reviewed changes

.github/workflows/release_binary.yml Outdated Show resolved Hide resolved

BYK added 2 commits January 10, 2026 01:21

fix: Use correct action version SHAs (restore original versions)

38dd030

fix: Use correct action version SHAs (restore original versions)

4dc3375

Dav1dde reviewed Jan 12, 2026

View reviewed changes

fix: Clean up action version comments

bc1ec1a

sentry bot reviewed Jan 12, 2026

View reviewed changes

cursor bot reviewed Jan 12, 2026

View reviewed changes

.github/workflows/changelog-preview.yml Outdated Show resolved Hide resolved

BYK added 2 commits January 13, 2026 22:43

Update Craft SHA to 1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce

32733fe

Update Craft SHA to 1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce

630e289

sentry bot reviewed Jan 13, 2026

View reviewed changes

BYK added 5 commits January 13, 2026 22:58

Remove changelog-preview workflow per review feedback

60fdab7

Add explicit permissions block to build_binary.yml

d13a73d

Add explicit permissions block to build_library.yml

904e96d

Add explicit permissions block to ci.yml

f1b80cd

Add explicit permissions block to enforce-license-compliance.yml

adbad65

sentry bot reviewed Jan 13, 2026

View reviewed changes

BYK added 4 commits January 13, 2026 23:13

Revert permissions changes to build_binary.yml

90df28a

Revert permissions changes to build_library.yml

522251b

Revert permissions changes to ci.yml

364cb0b

Revert permissions changes to enforce-license-compliance.yml

ae8fa20

sentry bot reviewed Jan 13, 2026

View reviewed changes

BYK added 2 commits January 13, 2026 23:58

fix: revert extraneous changes to non-release workflow files

f866211

build(craft): Fix release workflows and config

c47299a

sentry bot reviewed Jan 14, 2026

View reviewed changes

.github/workflows/release_library.yml Outdated

Comment on lines 32 to 35

uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce

env:

GITHUB_TOKEN: ${{ steps.token.outputs.token }}

with:

This comment was marked as outdated.

Sign in to view

cursor bot reviewed Jan 14, 2026

View reviewed changes

build(craft): Update Craft action to c6e2f04

1b3f60d

Conversation

BYK commented Jan 9, 2026

Summary

Changes

Documentation

Uh oh!

github-actions bot commented Jan 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Semver Impact of This PR

📋 Changelog Preview

New Features ✨

Bug Fixes 🐛

Build / dependencies / internal 🔧

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Dav1dde Jan 12, 2026

Choose a reason for hiding this comment

Uh oh!

BYK Jan 12, 2026

Choose a reason for hiding this comment

Uh oh!

Dav1dde Jan 12, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

BYK Jan 12, 2026

Choose a reason for hiding this comment

Uh oh!

Dav1dde Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

This comment was marked as outdated.

Uh oh!

This comment was marked as outdated.

Uh oh!

This comment was marked as outdated.

Uh oh!

cursor bot Jan 14, 2026

Choose a reason for hiding this comment

Global calver policy incorrectly applies to semver library releases

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions bot commented Jan 9, 2026 •

edited

Loading

Dav1dde Jan 12, 2026 •

edited

Loading