From 9ce458cb3bd88cddd2ca09f0571c0f7cf7572f54 Mon Sep 17 00:00:00 2001 From: jvoisin Date: Mon, 3 Sep 2018 14:28:00 +0200 Subject: [PATCH] Update the release process to create signed tarballs --- CONTRIBUTING.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index df09ab4..2c85fed 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -29,5 +29,8 @@ Since MAT2 is written in Python3, please conform as much as possible to the 6. Create a tag with `git tag -s $VERSION` 7. Push the commit with `git push origin master` 8. Push the tag with `git push --tags` -9. Tell the [downstreams](https://0xacab.org/jvoisin/mat2/blob/master/INSTALL.md) about it -10. Do the secret release dance +9. Create the signed tarball with `git archive --format=tar.xz --prefix=mat-$VERSION/ $VERSION > mat-$VERSION.tar.xz` +10. Sign the tarball with `gpg --armor --detach-sign mat-$VERSION.tar.xz` +11. Upload the result on Gitlab's [tag page](https://0xacab.org/jvoisin/mat2/tags) and add the changelog there +12. Tell the [downstreams](https://0xacab.org/jvoisin/mat2/blob/master/INSTALL.md) about it +13. Do the secret release dance