From 40663a88edce45c525c10b5cb9d05b0d01632e7e Mon Sep 17 00:00:00 2001 From: forkless Date: Tue, 9 Jun 2026 16:53:58 +0200 Subject: [PATCH] add sign-once reminder to release workflow skill --- skills/release-workflow/SKILL.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/skills/release-workflow/SKILL.md b/skills/release-workflow/SKILL.md index 477fe8e..25fa8f5 100644 --- a/skills/release-workflow/SKILL.md +++ b/skills/release-workflow/SKILL.md @@ -42,10 +42,11 @@ After CI completes: ## Signing & Push - Commit with `--no-gpg-sign` (avoids GPG passphrase hang in non-interactive terminals) -- Maintainer amends with `--gpg-sign` before push +- **Sign once.** Wait for CI to go green on the unsigned commit, **then** amend with `--gpg-sign` + force-push. Do not amend between CI runs — each amend creates a new SHA, which triggers a new CI run and leaves stale Pages deployments that block the next run. - Normal push for fast-forward commits - `--force-with-lease` for amended commits or tag refreshes - If force-pushing, delete old tag and re-tag after the new commit lands +- Tag once, push once. Re-signing an existing tag pushes a new SHA and triggers another CI run with the same deployment conflict risk. ## Release Notes