René's URL Explorer Experiment


Title: ci: verify release dependencies before publishing dependents by tannerlinsley · Pull Request #558 · TanStack/cli · GitHub

Open Graph Title: ci: verify release dependencies before publishing dependents by tannerlinsley · Pull Request #558 · TanStack/cli

X Title: ci: verify release dependencies before publishing dependents by tannerlinsley · Pull Request #558 · TanStack/cli

Description: Problem The publisher reported success on consecutive stable releases while the core package tarball still returned HTTP 404. During that window, the new CLI and aliases could resolve from npm but a fresh install could fail on the exact core version they require. Change Keep the existing Changesets version PR, trusted publisher workflow identity, and prerelease publication path. Publish stable versions in dependency order. Wait for the public core tarball and verify its SHA512 and manifest before uploading the CLI. Verify the CLI before uploading aliases. Verify the exact internal dependency versions in every archive. Record each upload attempt before it starts. Rerunning the same workflow can resume verification and advance to untouched packages without repeating an uncertain upload. Queue release runs and push the package tags only after the public artifacts verify. The core package's own npm latest tag still uses the existing trusted publisher behavior. This draft includes the verifier from #530 so the combined workflow can run against current main. Review #530 independently first. After it lands, rebase this branch so only the six follow-up files remain in the diff. Keep #557 held until the workflow has passed its hosted gates and required Core review. Checks Frozen pnpm install and the normal hook passed for all 10 builds, 558 unit tests, 20 release tests and eight blocking Chrome tests. The exact #557 manifests produced a seven-package release plan. Mocked registry and workflow responses covered a missing core tarball, an uncertain upload, a canceled run before the job and a missing attempt marker. Packed all seven workspaces locally with pnpm 11.1.0 and checked the exact internal dependency versions in their archived manifests. Offline workflow security scan passed. Tests performed no package uploads or remote tag writes.

Open Graph Description: Problem The publisher reported success on consecutive stable releases while the core package tarball still returned HTTP 404. During that window, the new CLI and aliases could resolve from npm but ...

X Description: Problem The publisher reported success on consecutive stable releases while the core package tarball still returned HTTP 404. During that window, the new CLI and aliases could resolve from npm but ...

Opengraph URL: https://github.com/TanStack/cli/pull/558

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:1a2e826d-6ca5-8fef-9069-16e1eed30c15
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8996:27EABE:279A3F2:33D3266:6AF9A0C9
html-safe-nonce5d0847f52eca16f5c85a30a35cb154fa6616e6ec538fb2fb5a91012334b73cab
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4OTk2OjI3RUFCRToyNzlBM0YyOjMzRDMyNjY6NkFGOUEwQzkiLCJ2aXNpdG9yX2lkIjoiNDQxOTMyMTU4MTg1OTg3Mjk2OSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacadb528858d893c2130ba291defeae1ebf186123bb8786eed5ed08e3ae651fbf6
hovercard-subject-tagpull_request:5148933981
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/TanStack/cli/pull/558/files
twitter:imagehttps://avatars.githubusercontent.com/u/5580297?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/5580297?s=400&v=4
og:image:altProblem The publisher reported success on consecutive stable releases while the core package tarball still returned HTTP 404. During that window, the new CLI and aliases could resolve from npm but ...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None612d3e6ffd693e7ea8d9fcf452370995872baef31d825b1fedef704cd3d24ac7
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/TanStack/cli git https://github.com/TanStack/cli.git
octolytics-dimension-user_id72518640
octolytics-dimension-user_loginTanStack
octolytics-dimension-repository_id932949058
octolytics-dimension-repository_nwoTanStack/cli
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id932949058
octolytics-dimension-repository_network_root_nwoTanStack/cli
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release072e34035c13c31543fba9f025cbbbda4210dae4
ui-targetcanary-1
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/TanStack/cli/pull/558/files#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FTanStack%2Fcli%2Fpull%2F558%2Ffiles
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FTanStack%2Fcli%2Fpull%2F558%2Ffiles
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=TanStack%2Fcli
Reloadhttps://github.com/TanStack/cli/pull/558/files
Reloadhttps://github.com/TanStack/cli/pull/558/files
Reloadhttps://github.com/TanStack/cli/pull/558/files
TanStackhttps://github.com/TanStack
clihttps://github.com/TanStack/cli
Codehttps://github.com/TanStack/cli
Issues13 (13)https://github.com/TanStack/cli/issues
Pull requests23 (23)https://github.com/TanStack/cli/pulls
Discussionshttps://github.com/TanStack/cli/discussions
Actionshttps://github.com/TanStack/cli/actions
Projectshttps://github.com/TanStack/cli/projects
Security and qualityhttps://github.com/TanStack/cli/security
Insightshttps://github.com/TanStack/cli/pulse
Sign up for GitHub https://github.com/signup?return_to=%2FTanStack%2Fcli%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2FTanStack%2Fcli%2Fissues%2Fnew%2Fchoose
tannerlinsleyhttps://github.com/tannerlinsley
mainhttps://github.com/TanStack/cli/tree/main
taren/factory-dependency-ready-releasehttps://github.com/TanStack/cli/tree/taren/factory-dependency-ready-release
Conversation 2 https://github.com/TanStack/cli/pull/558
Commits 3 https://github.com/TanStack/cli/pull/558/commits
Checks 7 https://github.com/TanStack/cli/pull/558/checks
Files changed https://github.com/TanStack/cli/pull/558/files
Please reload this pagehttps://github.com/TanStack/cli/pull/558/files
ci: verify release dependencies before publishing dependents https://github.com/TanStack/cli/pull/558/files#top
Show all changes 3 commits https://github.com/TanStack/cli/pull/558/files
6d6bd10 fix(ci): verify published artifacts before completing releases tannerlinsley Nov 1, 2026 https://github.com/TanStack/cli/pull/558/commits/6d6bd1056f87ab41054573ef0600047bb5d1dbc5
d84e632 fix(ci): make release retries safe across job boundaries tannerlinsley Nov 1, 2026 https://github.com/TanStack/cli/pull/558/commits/d84e632c64158b1cdbb6868e77e0356603b17458
ae0ecbf ci: verify release dependencies before publishing dependents tannerlinsley Nov 4, 2026 https://github.com/TanStack/cli/pull/558/commits/ae0ecbfcd06a44413475a254b9c394ea5e0ad4fd
Clear filters https://github.com/TanStack/cli/pull/558/files
Please reload this pagehttps://github.com/TanStack/cli/pull/558/files
Please reload this pagehttps://github.com/TanStack/cli/pull/558/files
action.yml https://github.com/TanStack/cli/pull/558/files#diff-6cb3d5b73f5b3021ed537ae3498c19795ccb77f640539e12527e607bbd9f3ffd
release.yml https://github.com/TanStack/cli/pull/558/files#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34
package.json https://github.com/TanStack/cli/pull/558/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
create-github-release.mjs https://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
release-artifacts.test.mjs https://github.com/TanStack/cli/pull/558/files#diff-dc258aebb2ffd6938f6db4e01c3c6acf848b1ce026226c54f8db8b7ddf085344
release-identity.mjs https://github.com/TanStack/cli/pull/558/files#diff-aac212832b4396197d66e72045e26defde7806e0af89469a218213be922ee292
release-identity.test.mjs https://github.com/TanStack/cli/pull/558/files#diff-fa77040e06ddb09670a3f0c842b60b40a2d7bbf2a5dc0478613d5d02ce4f2c39
release-publish-plan.mjs https://github.com/TanStack/cli/pull/558/files#diff-b17e238a8428000ea23318ed938a8c24a41bc01a3d46a2469b255985da545881
release-publish-plan.test.mjs https://github.com/TanStack/cli/pull/558/files#diff-7e9415b07250b59e6eb8e112c56688c4f5ceb1820a0b526ebd2a6c1e6e0e7abb
verify-release-artifacts.mjs https://github.com/TanStack/cli/pull/558/files#diff-847339314a214260f20a39a837910b7f3975d04018b314322fa13e94da5fcdd5
https://github.com/TanStack/cli/blob/main/.github/CODEOWNERS#L1
.github/actions/publish-verified-package/action.ymlhttps://github.com/TanStack/cli/pull/558/files#diff-6cb3d5b73f5b3021ed537ae3498c19795ccb77f640539e12527e607bbd9f3ffd
View file https://github.com/TanStack/cli/blob/ae0ecbfcd06a44413475a254b9c394ea5e0ad4fd/.github/actions/publish-verified-package/action.yml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/TanStack/cli/pull/558/{{ revealButtonHref }}
https://github.com/TanStack/cli/blob/main/.github/CODEOWNERS#L1
.github/workflows/release.ymlhttps://github.com/TanStack/cli/pull/558/files#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34
View file https://github.com/TanStack/cli/blob/ae0ecbfcd06a44413475a254b9c394ea5e0ad4fd/.github/workflows/release.yml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/TanStack/cli/pull/558/{{ revealButtonHref }}
https://github.com/TanStack/cli/pull/558/files#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34
https://github.com/TanStack/cli/pull/558/files#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34
https://github.com/TanStack/cli/pull/558/files#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34
https://github.com/TanStack/cli/pull/558/files#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34
package.jsonhttps://github.com/TanStack/cli/pull/558/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
View file https://github.com/TanStack/cli/blob/ae0ecbfcd06a44413475a254b9c394ea5e0ad4fd/package.json
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/TanStack/cli/pull/558/{{ revealButtonHref }}
https://github.com/TanStack/cli/pull/558/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
https://github.com/TanStack/cli/pull/558/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
https://github.com/TanStack/cli/blob/main/.github/CODEOWNERS#L5
scripts/create-github-release.mjshttps://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
View file https://github.com/TanStack/cli/blob/ae0ecbfcd06a44413475a254b9c394ea5e0ad4fd/scripts/create-github-release.mjs
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/TanStack/cli/pull/558/{{ revealButtonHref }}
https://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
https://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
https://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
https://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
https://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
https://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
https://github.com/TanStack/cli/pull/558/files#diff-d808e2e1a0d325f42e985e216107bd427660047c2a61f46c7eb4f3fe97d59e94
Please reload this pagehttps://github.com/TanStack/cli/pull/558/files
Please reload this pagehttps://github.com/TanStack/cli/pull/558/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.