Re: Create a GitHub action to build releases

On Sun, Aug 16, 2026 at 4:39 PM Mark Thomas <[email protected]> wrote:
>
> All,
>
> I've been thinking about further increasing the automation we use the
> build releases. There are various drivers for this including:
> - potentially more frequent releases (in response to the volume of AI
>    security issues)
> - easier for any committer to roll a release (no need to set up eSigner
>    access)
> - reduced cost (each additional eSigner user costs the ASF $39/month)
>
> I believe all the components we would need to build releases via a
> GitHub action are in place.
>
> With reproducible builds, we can fully validate that the binaries built
> by automation are not subverted.
>
> If there is general agreement to head in this direction, my thinking was
> that we could work out a high-level plan between now and CoC Glasgow and
> then work on this in the hackathon.
>
> Thoughts?

I'm not sure, I thought the ASF wanted us to use their new tool
instead. Also this would make us 100% dependent on GH ...

Rémy

> Mark
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>