docs: record audited 5.2.8 release evidence
Some checks are pending
CI / Source-only, license, shell and secret policy (push) Waiting to run
CI / Build and full tests (clang) (push) Blocked by required conditions
CI / Build and full tests (gcc) (push) Blocked by required conditions
CI / Strict warnings (clang) (push) Blocked by required conditions
CI / Strict warnings (gcc) (push) Blocked by required conditions
CI / ASan, LSan and UBSan (push) Blocked by required conditions
CI / GCC static analyzer (push) Blocked by required conditions
CI / Reproducible audited source archive (push) Blocked by required conditions
CI / Debian/Ubuntu source-built package (push) Blocked by required conditions
CI / openSUSE Tumbleweed x86_64 RPM gate (push) Blocked by required conditions
CI / Fedora noarch GUI RPM and SRPM gate (push) Blocked by required conditions
CI / Linux x86_64 notice-bearing CLI tar.xz gate (push) Blocked by required conditions
CI / Source-only GUI portable ZIP gate (push) Blocked by required conditions
CI / Windows and macOS release gates (push) Blocked by required conditions
CI / Windows x86_64 package and smoke test (push) Blocked by required conditions
CI / macOS native DMG and installed-image test (push) Blocked by required conditions

This commit is contained in:
Cristian Cezar Moisés 2026-08-31 22:28:57 -03:00
commit f8844f806a
10 changed files with 140 additions and 57 deletions

View file

@ -57,9 +57,13 @@ unchanged.
- Realign current code, package, workflow, artifact, and documentation
references to 5.2.8, and pin the AUR/Homebrew SHA-256 and Guix content hash
to the final reproducible source archive before tagging.
- Require fresh exact-`v5.2.8` source, checksum, hosted CI, native-platform,
package, OBS, and promotion evidence. This entry does not claim those gates
passed, and no v5.2.7 result transfers automatically.
- Exact-tag run `33456209269` passed all 15 source, package, analyzer,
sanitizer, OBS, Windows, and macOS jobs at `ebb9ab3`. Promotion initially
stopped before publication because its validator treated `%{ARCH}` as the
SRPM discriminator; the genuine SRPMs instead correctly carry
`%{SOURCEPACKAGE}=1`. Commit `33eb904` corrected and strengthened that gate,
and run `33457868306` published the exact 13 tested assets without rebuilding
them. No v5.2.7 result transfers to this evidence.
## [5.2.7] — 2026-08-31 — Native test-harness portability corrections