For security we sign tags. To be able to sign tags you need to tell Git which key you would like to use. Please follow these steps to tell Git about your signing key.
- Merge all PRs intended for the release.
- Rebase latest remote main branch locally (
git pull --rebase origin main). - Ensure all analysis checks and tests are passing (
TEST_PARALLELISM=8 make testacc). - Manually update generated
docs/index.md. - Open a new PR to update CHANGELOG (example).
- make sure to use the
Skip-Docslabel before opening to ensure the docs action doesn't fail with the new version. - We utilize semantic versioning and only include relevant/significant changes within the CHANGELOG.
- make sure to use the
- 🚨 Ensure any removals are considered a BREAKING CHANGE and must be published in a major release.
- Merge CHANGELOG.
- Rebase latest remote main branch locally (
git pull --rebase origin main). - Create a new signed tag (replace
{{remote}}with the remote pointing to the official repository i.e.originorupstreamdepending on your Git workflow):tag=vX.Y.Z && git tag -s $tag -m $tag && git push {{remote}} $tag.- Triggers a github action that produces a 'draft' release.
- Copy/paste CHANGELOG into the draft release.
- Publish draft release.
- Triggers a github webhook that produces a release on the terraform registry.