Skip to content

ci: harden release pipeline dependencies, wheel builds, and checkout credentials - #5884

Open
DylanRussell wants to merge 2 commits into
open-telemetry:mainfrom
DylanRussell:release_improvements
Open

DylanRussell wants to merge 2 commits into
open-telemetry:mainfrom
DylanRussell:release_improvements

Conversation

@DylanRussell

Copy link
Copy Markdown
Contributor

Description

Applies the remaining release pipeline hardening changes from open-telemetry/opentelemetry-python-genai#978:

  • Set minimumReleaseAge: "3 days" in .github/renovate.json5 and use uv with --exclude-newer 3d / UV_EXCLUDE_NEWER=3d across release workflows and scripts.
  • Verify a clean git working tree before building and audit built wheel contents in scripts/build.sh.
  • Set persist-credentials: false on remaining actions/checkout steps in release/backport workflows and authenticate pushes via gh auth setup-git.

Type of change

  • New feature (non-breaking change which adds functionality)

Checklist:

See contributing.md for styleguide, changelog guidelines, and more.

  • I am a human and not a bot
  • I have run tox -e precommit
  • I have run tox -e typecheck
  • I have run the relevant tests and linting tox environments

@DylanRussell
DylanRussell requested a review from a team as a code owner November 4, 2026 14:33
@DylanRussell DylanRussell added the Skip Changelog PRs that do not require a CHANGELOG.md entry label Nov 4, 2026
@opentelemetry-pr-dashboard

opentelemetry-pr-dashboard Bot commented Nov 4, 2026 •

Copy link
Copy Markdown

Pull request dashboard status

Waiting on reviewers · refreshed 2026-11-04 17:18 UTC

Review the latest changes.

Status above doesn't look right?
  • Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
  • Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

Comment thread .github/scripts/update-version-patch.sh Resolved

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Skip Changelog PRs that do not require a CHANGELOG.md entry

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

2 participants