Skip to content

ci: build release binaries with goreleaser - #55

Open
khvn26 wants to merge 2 commits into
release-please-configfrom
goreleaser-binaries
Open

ci: build release binaries with goreleaser#55
khvn26 wants to merge 2 commits into
release-please-configfrom
goreleaser-binaries

Conversation

@khvn26

@khvn26 khvn26 commented Jul 29, 2026

Copy link
Copy Markdown
Member

Contributes to #45

Verified locally

  • goreleaser check clean.
  • goreleaser release --snapshot --clean --skip=publish built all six targets and packaged them; archives contain flagsmith, LICENSE, README.md.
  • The darwin/arm64 binary prints flagsmith version v1.1.0 — the stamp resolves through the internal/version.Version ldflags path.

Also attests the archives: actions/attest with subject-checksums covers every file listed in checksums.txt. Verify with gh attestation verify --owner Flagsmith <file>.

Six targets, matching the cross-compile job: linux, darwin and windows on
amd64 and arm64. CGO_ENABLED=0 costs nothing — go-keyring shells out to
`security` on macOS and talks D-Bus on Linux, neither of which needs cgo.

The tag drives everything: release-please creates it and the release, then
`mode: append` uploads the archives into that release without touching the
notes it wrote.

beep boop
@coderabbitai

coderabbitai Bot commented Jul 29, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 93b4741b-9bec-4f1c-ac6d-e001474da883

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@khvn26
khvn26 marked this pull request as ready for review July 29, 2026 10:49
@khvn26
khvn26 requested review from a team and emyller and removed request for a team July 29, 2026 12:28
goreleaser has no attestation of its own — the documented route is
actions/attest after it runs. subject-checksums attests every file listed in
checksums.txt, so all six archives are covered without naming them.

Verify with `gh attestation verify --owner Flagsmith <file>`.

beep boop
@khvn26 khvn26 mentioned this pull request Jul 29, 2026
10 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants