This repository is a downstream distribution of gsudo. Keep downstream automation, packaging, and release logic here without importing upstream source into master.
masteris an orphan downstream branch (workflows, packaging, and distro metadata only).- Upstream source of truth is mirrored in
upstream. - Product code changes belong on
release/vX.Y.Zbranches (based on upstream tags).
- Do not add upstream gsudo source code to
master. - Keep
upstreamaligned withgerardog/gsudomaster. - Keep mirrored upstream tags namespaced as
upstream/vX.Y.Z. - Use
release/vX.Y.Zfor downstream code changes on top of upstream versions.
- Downstream version format is
X.Y.Z.R. X.Y.Ztracks upstream.Rincrements only for downstream revisions.
build-package.ymlis the workflow for build, packaging, and release.- Build target is
net9.0only (do not reintroducenet46). - Binary signing uses AzureSignTool and must be skipped when signing secrets are unavailable.
- Do not add NuGet package signing; sign binaries inside the
.nupkgonly. - Zip packages are plain archives (not Authenticode-signed).
sync-upstream.ymlis intended to be manually triggered (workflow_dispatch) unless explicitly changed.
- Primary NuGet package ID is
Devolutions.gsudo. - Packaging assets live under
nuget/.
- Prefer minimal, targeted edits aligned with downstream distribution needs.
- Do not add unrelated tooling, frameworks, or workflow complexity.
- Preserve existing naming and branch conventions.