chore(ENG-12828): remove PEX .platforms config #320
Merged
BartoszBlizniak merged 6 commits intoJul 17, 2026
Conversation
BartoszBlizniak
changed the title
cloudsmith-iduffy
approved these changes
Jul 7, 2026
BartoszBlizniak
force-pushed
the
eng-12827-publish-standalone-binaries-via-the-release-docker-pipelines
branch
from
July 16, 2026 12:15
4f2fdab to
81c8125
Compare
…NG-12827) Wire the standalone PyInstaller binaries (ENG-12826) into the release and Docker pipelines, dogfooding the freshly-built cloudsmith binary to authenticate (GitHub OIDC) and publish: - Publish per-platform archives + SHA256 to Cloudsmith and build/push the container image, using the built binary + OIDC and the Docker credential helper instead of cloudsmith-cli-action / static-key docker login. - GPG-sign the Linux archives (detached .sig sibling files). - Idempotent, immutable-repo-safe publishing (skip already-published artifacts/tags). - Tag raw uploads (os/arch/libc/target/type) for queryable CI selection. - Dockerfile: multi-stage Alpine, musl binary, non-root, OCI labels; Docker Hub floating tags. - CI hardening + perf: single-source target list, composite bootstrap action, GH_REPO for gh, trimmed clean-room docker runs, pinned runners. - Redact PII from online smoketest logs (SMOKETEST_DEBUG for detail). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- setup-cloudsmith-binary: verify the .sha256 checksum before extracting the archive onto PATH, so a corrupted/unexpected artifact is never executed (the .sha256 is already downloaded alongside the archive). - release.yml: document at the binaries call site that publishing is OIDC-only and the API key secret is required solely for the read-only online smoketest (fail-fast when online_smoketest is requested); the OIDC online path is covered by the binaries `oidc` job. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
BartoszBlizniak
force-pushed
the
eng-12827-publish-standalone-binaries-via-the-release-docker-pipelines
branch
from
July 16, 2026 16:18
81c8125 to
0ee57a6
Compare
BartoszBlizniak
force-pushed
the
eng-12828-remove-dead-pex-platforms-build-config
branch
from
July 16, 2026 16:20
074155a to
bac2c7d
Compare
Export cloudsmith-cli-release-key.asc during sign-linux, stage it as a release asset, assert its presence before publishing, and point the README verification docs at it. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
BartoszBlizniak
force-pushed
the
eng-12828-remove-dead-pex-platforms-build-config
branch
from
July 16, 2026 16:49
bac2c7d to
e492c66
Compare
BartoszBlizniak
marked this pull request as ready for review
July 17, 2026 09:31
Base automatically changed from
eng-12827-publish-standalone-binaries-via-the-release-docker-pipelines
to
master
July 17, 2026 10:31
BartoszBlizniak
deleted the
eng-12828-remove-dead-pex-platforms-build-config
branch
July 17, 2026 10:52
6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Removes the dead
.github/.platforms/PEX platform configuration. The multi-platform PEX.platforms/*.jsonfiles and their generator are superseded by the PyInstaller binary build.No runtime or build behaviour change.
Type of Change
Additional Notes
N/A