fix(ci): gate aur publish on metadata check #9

Merged

barrettruth merged 1 commit from ci/gate-publish-on-quality into main

2026-05-03 16:07:43 +00:00

barrettruth commented

2026-05-03 16:04:17 +00:00

Owner

Problem
The AUR publish workflow pushes package metadata directly on main PKGBUILD changes without a separate validation gate.

Solution
Add a Package Metadata job that verifies makepkg can generate .SRCINFO, then make the Publish job depend on it. The publish job is restricted to refs/heads/main so manual dispatches do not publish arbitrary branches.

Verification

Parsed all changed Forgejo workflow YAML with PyYAML.
Ran the .SRCINFO generation command locally and verified it produced non-empty metadata.
Ran git diff --check.

Problem The AUR publish workflow pushes package metadata directly on main PKGBUILD changes without a separate validation gate. Solution Add a Package Metadata job that verifies makepkg can generate .SRCINFO, then make the Publish job depend on it. The publish job is restricted to refs/heads/main so manual dispatches do not publish arbitrary branches. Verification - Parsed all changed Forgejo workflow YAML with PyYAML. - Ran the .SRCINFO generation command locally and verified it produced non-empty metadata. - Ran git diff --check.

barrettruth added 1 commit

2026-05-03 16:04:17 +00:00

fix(ci): gate aur publish on metadata check e9433146c5