trungdong / prov / 31246341818

98%

push

github

Add a release runbook (#369)

* Add a release runbook

Until now the release process lived only inside per-release plan documents, so each release meant re-deriving it from the last one, and the hard-won details were never written down anywhere a contributor would look. This captures the sequence as executed for 3.1.0: pre-flight matrix and build checks, what to stamp, how the Codacy and Coveralls gates differ, the TestPyPI dry run, and the verification that catches a wheel missing its package data.

It records three things that are not discoverable from the workflow file: that creating the GitHub release is what publishes to PyPI, that workflow_dispatch can only ever reach TestPyPI, and that a conda-forge merge failing with "the base branch policy prohibits the merge" actually means the gh token lacks the workflow scope.

* Open the 2.x line to back-ported bug fixes through 2.6.0

Since 3.0.0 shipped, the 2.x maintenance line has been documented as receiving security fixes only. A review of everything merged after the 2.5.1 tag found a substantial set of conformance and correctness fixes that port cleanly to 2.x, so the line is opened to back-ported bug fixes as well.

The widening is bounded by scope rather than by date: 2.x accepts back-ported fixes up to and including 2.6.0, then reverts to security fixes only. New features and behaviour-breaking corrections are never back-ported and stay on 3.x, which keeps the commitment from reading as open-ended.

See docs/superpowers/specs/2026-08-07-2x-backport-programme.md for which fixes are in scope, how they are staged across 2.5.2, 2.5.3 and 2.6.0, and which are deliberately left unported.

* Specify the 2.x back-port programme

Assesses every fix merged into master after the 2.5.1 tag for portability to the 2.x maintenance line, and stages the portable ones across three releases: 2.5.2 (the XXE hardening, shippable under the existing security-only policy), 2.5.3 (fixes that correct broken behaviour wit... (continued)

494 of 495 branches covered (99.8%)

2794 of 2857 relevant lines covered (97.79%)

5.87 hits per line