Use this checklist before publishing elderheim artifacts.
- Confirm
Cargo.toml,Cargo.lock,CHANGELOG.md, and the matchingrelease-notes/RELEASE_NOTES_*.mdagree on the version. - Run
scripts/checks.sh. - Run
scripts/release_checks.sh. - Run
cargo deny checkandcargo audit. - Generate SBOM files with
scripts/generate-sbom.sh. - Build release binaries with
scripts/build_release_binary.py --ref vX.Y.Zfrom a signed tag and use--expected-committo pin the tag target. - Record source archive checksums, binary checksums, and SBOM checksums in the release notes.
- Tag the release from a clean tree.
Do not publish a release if unsupported codegen paths can silently produce an incorrect binary.
For the required tag-by-tag stop gates before 1.0.0, see
Tag Stop Plan.