Skip to content

feat: add unified release workflow with crates.io, Homebrew, and Dock…#673

Merged
Zee2413 merged 1 commit intoaws-cloudformation:mainfrom
Zee2413:workflow-release
Feb 27, 2026
Merged

feat: add unified release workflow with crates.io, Homebrew, and Dock…#673
Zee2413 merged 1 commit intoaws-cloudformation:mainfrom
Zee2413:workflow-release

Conversation

@Zee2413
Copy link
Contributor

@Zee2413 Zee2413 commented Feb 26, 2026

…er publishing

Issue #, if available:

Description of changes:
Replaces the existing release.yml with a unified release workflow triggered via workflow_dispatch.

  • Automates version bumping across all three Cargo.toml files (guard, guard-lambda, guard-ffi)
  • Builds cross-platform binaries for linux, macOS, and Windows (x86_64, aarch64, i686) with backward-compatible asset names
  • Creates GitHub Release with auto-generated release notes and all binary assets
  • Publishes cfn-guard, cfn-guard-lambda, and cfn-guard-ffi to crates.io (after GitHub Release succeeds)
  • Pushes versioned Docker image to ECR Public Gallery
  • Opens Homebrew formula PR automatically with computed SHA256
  • Includes dry run mode and skip flags for crates.io and Homebrew
  • Replaces deprecated actions (upload-release-asset@v1, get-release@v1.3.2) with modern alternatives
  • Removes publish_docker.yml and publish_tagged_docker.yml — Docker publishing is now consolidated in the release workflow
  • Docker latest tag is now exclusively owned by the release workflow (no longer overwritten on every push to main)

Testing:

  • screenshot of options for Run Workflow below
  • successfully tested in public fork workflow which created the expected assets (releases)
    • Publish Docker to ECR expected to fail since the secrets were not available in public fork
    • Docker to ECR can be verified in aws-cloudformation repo after merge
  • crates and homebrew steps to be verified in main repo after merge
image

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

@Zee2413 Zee2413 closed this Feb 26, 2026
@Zee2413 Zee2413 reopened this Feb 26, 2026
Copy link
Contributor

@deepfuriya deepfuriya left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Zee2413 Zee2413 merged commit cb9266d into aws-cloudformation:main Feb 27, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants