Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
1736a75
ci(release): Switch from action-prepare-release to Craft
BYK Jan 9, 2026
2af3714
ci(release): Restore GitHub App token authentication
BYK Jan 9, 2026
c6c86bb
ci(release): Restore GitHub App token authentication
BYK Jan 9, 2026
e876603
fix: Pin actions to SHA and add permissions blocks
BYK Jan 10, 2026
3720f92
fix: Add calver: true configuration for CalVer releases
BYK Jan 10, 2026
38dd030
fix: Use correct action version SHAs (restore original versions)
BYK Jan 10, 2026
4dc3375
fix: Use correct action version SHAs (restore original versions)
BYK Jan 10, 2026
bc1ec1a
fix: Clean up action version comments
BYK Jan 12, 2026
32733fe
Update Craft SHA to 1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce
BYK Jan 13, 2026
630e289
Update Craft SHA to 1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce
BYK Jan 13, 2026
60fdab7
Remove changelog-preview workflow per review feedback
BYK Jan 13, 2026
d13a73d
Add explicit permissions block to build_binary.yml
BYK Jan 13, 2026
904e96d
Add explicit permissions block to build_library.yml
BYK Jan 13, 2026
f1b80cd
Add explicit permissions block to ci.yml
BYK Jan 13, 2026
adbad65
Add explicit permissions block to enforce-license-compliance.yml
BYK Jan 13, 2026
90df28a
Revert permissions changes to build_binary.yml
BYK Jan 13, 2026
522251b
Revert permissions changes to build_library.yml
BYK Jan 13, 2026
364cb0b
Revert permissions changes to ci.yml
BYK Jan 13, 2026
ae8fa20
Revert permissions changes to enforce-license-compliance.yml
BYK Jan 13, 2026
f866211
fix: revert extraneous changes to non-release workflow files
BYK Jan 13, 2026
c47299a
build(craft): Fix release workflows and config
BYK Jan 14, 2026
1b3f60d
build(craft): Update Craft action to c6e2f04
BYK Jan 14, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
93 changes: 46 additions & 47 deletions .craft.yml
Original file line number Diff line number Diff line change
@@ -1,55 +1,54 @@
minVersion: "2.15.0"
minVersion: 2.18.0
changelog:
policy: auto

statusProvider:
name: github
config:
contexts:
- "Build Docker Image (relay)"

- Build Docker Image (relay)
targets:
- name: github
- name: registry
apps:
app:relay:
urlTemplate: https://downloads.sentry-cdn.com/relay/{{version}}/{{file}}
includeNames: /^relay-(Darwin|Linux|Windows).*$/i
- name: gcs
bucket: sentry-sdk-assets
includeNames: /^relay-(Darwin|Windows|Linux).*$/
paths:
- path: /relay/{{version}}/
metadata:
cacheControl: public, max-age=2592000
- path: /relay/latest/
metadata:
cacheControl: public, max-age=600
- id: release
name: docker
source: ghcr.io/getsentry/relay
target: ghcr.io/getsentry/relay
- id: release-dockerhub
name: docker
source: ghcr.io/getsentry/relay
target: getsentry/relay
- id: latest
name: docker
source: ghcr.io/getsentry/relay
target: ghcr.io/getsentry/relay
targetFormat: "{{{target}}}:latest"
- id: latest
name: docker
source: ghcr.io/getsentry/relay
target: getsentry/relay
targetFormat: "{{{target}}}:latest"

- name: github
- name: registry
apps:
app:relay:
urlTemplate: https://downloads.sentry-cdn.com/relay/{{version}}/{{file}}
includeNames: /^relay-(Darwin|Linux|Windows).*$/i
- name: gcs
bucket: sentry-sdk-assets
includeNames: /^relay-(Darwin|Windows|Linux).*$/
paths:
- path: /relay/{{version}}/
metadata:
cacheControl: public, max-age=2592000
- path: /relay/latest/
metadata:
cacheControl: public, max-age=600
- id: release
name: docker
source: ghcr.io/getsentry/relay
target: ghcr.io/getsentry/relay
- id: release-dockerhub
name: docker
source: ghcr.io/getsentry/relay
target: getsentry/relay
- id: latest
name: docker
source: ghcr.io/getsentry/relay
target: ghcr.io/getsentry/relay
targetFormat: '{{{target}}}:latest'
- id: latest
name: docker
source: ghcr.io/getsentry/relay
target: getsentry/relay
targetFormat: '{{{target}}}:latest'
requireNames:
- /^relay-Darwin-x86_64$/
- /^relay-Darwin-x86_64-dsym.zip$/
- /^relay-Linux-x86_64$/
- /^relay-Linux-x86_64-debug.zip$/
- /^relay-Linux-aarch64$/
- /^relay-Linux-aarch64-debug.zip$/
- /^relay-Windows-x86_64-pdb.zip$/
- /^relay-Windows-x86_64\.exe$/
- /^relay-Darwin-x86_64$/
- /^relay-Darwin-x86_64-dsym.zip$/
- /^relay-Linux-x86_64$/
- /^relay-Linux-x86_64-debug.zip$/
- /^relay-Linux-aarch64$/
- /^relay-Linux-aarch64-debug.zip$/
- /^relay-Windows-x86_64-pdb.zip$/
- /^relay-Windows-x86_64\.exe$/
versioning:
policy: calver
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Global calver policy incorrectly applies to semver library releases

Medium Severity

The global versioning.policy: calver setting in .craft.yml applies to all releases, but the Python library releases (via release_library.yml with path: py) require semver versioning according to the PR discussion. The library release workflow has no mechanism to override this global calver policy, potentially causing version validation issues or incorrect version handling for Python library releases.

Additional Locations (1)

Fix in Cursor Fix in Web

3 changes: 1 addition & 2 deletions .github/workflows/release_binary.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,10 +34,9 @@ jobs:
fetch-depth: 0

- name: Prepare release
uses: getsentry/action-prepare-release@v1
uses: getsentry/craft@c6e2f04939b6ee67030588afbb5af76b127d8203
env:
GITHUB_TOKEN: ${{ steps.token.outputs.token }}
with:
version: ${{ github.event.inputs.version }}
force: ${{ github.event.inputs.force }}
calver: true
2 changes: 1 addition & 1 deletion .github/workflows/release_library.yml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
fetch-depth: 0

- name: Prepare release
uses: getsentry/action-prepare-release@v1
uses: getsentry/craft@c6e2f04939b6ee67030588afbb5af76b127d8203
env:
GITHUB_TOKEN: ${{ steps.token.outputs.token }}
with:
Expand Down
Loading