Validate A Release
Validate the release, check the released binaries, is 0.18.x safe to roll out, prove a...
Install
npx skills add different-ai/openwork --skill validate-a-release -g -a claude-code -y- Repository
- different-ai/openwork24.4k
- Category
- Engineering
- Updated
- 3d ago
- License
- See repository
- Context cost
- Lightabout 729 tokens
- Runs scripts
- No, instructions only
What it does
Validate the release, check the released binaries, is 0.18.x safe to roll out, prove a published desktop release. Checks the RELEASED mac-arm64 enterprise and cloud binaries' signing and notarization and the updater manifests, and publishes evidence.
Skill: validate-a-release
Run after release reports the GitHub release published. Every check runs on
the artifacts users download, never on a local build. macOS arm64 host, gh
authenticated.
Booting packaged builds is covered before release, not here: the Linux
packaged smoke (app-smoke, "Packaged desktop smoke", which every alpha
release waits for) and the macOS signed update install
(packaged-update-install) in the scheduled ci-tests.yml run. Check that
the release commit's alpha run and latest scheduled run passed both.
1. Download and unpack
V is the release under test.
export V=0.18.45
export R=/tmp/ow-release-$V; mkdir -p $R && cd $R
gh release download v$V -R different-ai/openwork -p "openwork-enterprise-mac-arm64-$V.zip" -p "openwork-cloud-mac-arm64-$V.zip" -p '*.yml' --clobber
for f in enterprise cloud; do rm -rf $f-$V; mkdir $f-$V
ditto -x -k openwork-$f-mac-arm64-$V.zip $f-$V && xattr -dr com.apple.quarantine $f-$V; done
export ENT="$R/enterprise-$V/OpenWork Enterprise.app" CLOUD="$R/cloud-$V/OpenWork Cloud.app"
2. Signing and notarization
for app in "$ENT" "$CLOUD"; do codesign --verify --deep --strict "$app" && spctl -a -t exec -vv "$app"; done
Expect accepted, source=Notarized Developer ID, origin=Developer ID Application: Different AI inc. (F5DJWB4CCV).
