22
33This is release preparation. A dated changelog section does not mean the version
44has been tagged or published. The proposed date must be refreshed if publication
5- happens on another day. Issue #307 remains open until publication evidence exists.
5+ happens on another day. Keep the active 0.5.0 release-tracking issue open until
6+ publication evidence exists; this checklist intentionally does not hard-code a
7+ historical issue number.
68
791 . Merge the reviewed 0.5.0 issue train and all remaining 0.5.0 PRs. Refresh the
810 release PR against their final integrated commit and include their changelog
@@ -21,6 +23,13 @@ happens on another day. Issue #307 remains open until publication evidence exist
2123 wheel/sdist, then verify matching SHA256SUMS, SPDX SBOM, provenance and SBOM
2224 attestations, RELEASE-BOM-ROW, tag target, and GitHub release assets.
23257 . Verify a clean installation of exactly ` base-cli==0.5.0 ` from PyPI. Record the
24- immutable release URL and evidence on #307 , then close it.
26+ immutable tag and GitHub release URLs, PyPI result, checksums, SPDX SBOM,
27+ provenance and SBOM attestations, RELEASE-BOM-ROW, and downstream evidence
28+ on the active release-tracking issue. Close that issue only after every
29+ required artifact and compatibility result has been independently verified.
30+
31+ Merged release preparation is not publication completion: the release is not
32+ complete while the tag, GitHub release, PyPI package, or required evidence is
33+ missing, even when the preparation pull request and local gates are green.
2534
2635The operational commands and recovery rules remain in [ Releasing] ( releasing.md ) .
0 commit comments