feat(package): publish semver sidecar alongside each agent binary #116

Merged

David merged 2 commits from feat/VA-114-version-sidecar into main

2026-07-06 02:36:04 +02:00

Claude-Run commented

2026-07-06 02:00:45 +02:00

Member

Publish a small, machine-readable .version sidecar next to each binary in the generic package so the vervain-server fetcher, which runs on a different arch and cannot execute the binary, can read the exact semver without byte-scanning the binary's rodata.

A new step writes out/vervainagent-6.version and out/<ARTIFACT_NAME>.version, each containing steps.version.outputs.value (the resolved git describe semver from oci-build/get-version.nu) as a single line. Both sidecars are added to the $files upload list, so they publish to the pinned, stable, and latest coordinates exactly like the existing .sig files via upload_immutable / upload_moving.

The sidecar is unsigned metadata; the binary's integrity remains covered by the existing age/XEdDSA signature and SHA-256 checksum, which are unchanged. The sidecar content equals the binary's built-in version::VERSION because build.rs mirrors the same git describe --tags --always --long logic as get-version.nu.

#VA-114

Publish a small, machine-readable `.version` sidecar next to each binary in the generic package so the vervain-server fetcher, which runs on a different arch and cannot execute the binary, can read the exact semver without byte-scanning the binary's rodata. A new step writes `out/vervainagent-6.version` and `out/<ARTIFACT_NAME>.version`, each containing `steps.version.outputs.value` (the resolved `git describe` semver from oci-build/get-version.nu) as a single line. Both sidecars are added to the `$files` upload list, so they publish to the pinned, `stable`, and `latest` coordinates exactly like the existing `.sig` files via `upload_immutable` / `upload_moving`. The sidecar is unsigned metadata; the binary's integrity remains covered by the existing age/XEdDSA signature and SHA-256 checksum, which are unchanged. The sidecar content equals the binary's built-in `version::VERSION` because build.rs mirrors the same `git describe --tags --always --long` logic as get-version.nu. #VA-114

Claude-Run added 1 commit

2026-07-06 02:00:45 +02:00

feat(package): publish semver sidecar alongside each agent binary

Check / fmt + clippy + tests (pull_request) Has been cancelled

Details

20ead95b29

Publish a small, machine-readable `.version` sidecar next to each binary in the generic package so the vervain-server fetcher, which runs on a different arch and cannot execute the binary, can read the exact semver without byte-scanning the binary's rodata.

A new step writes `out/vervainagent-6.version` and `out/<ARTIFACT_NAME>.version`, each containing `steps.version.outputs.value` (the resolved `git describe` semver from oci-build/get-version.nu) as a single line. Both sidecars are added to the `$files` upload list, so they publish to the pinned, `stable`, and `latest` coordinates exactly like the existing `.sig` files via `upload_immutable` / `upload_moving`.

The sidecar is unsigned metadata; the binary's integrity remains covered by the existing age/XEdDSA signature and SHA-256 checksum, which are unchanged. The sidecar content equals the binary's built-in `version::VERSION` because build.rs mirrors the same `git describe --tags --always --long` logic as get-version.nu.

#VA-114

David added 1 commit

2026-07-06 02:09:27 +02:00

Merge branch 'main' into feat/VA-114-version-sidecar

Check / fmt + clippy + tests (pull_request) Successful in 26m36s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

df2cef6caa