Candidate Loop
- Update
VERSIONto the next plain numericX.Y.Zbuild sequence and run./scripts/sync-version. - Commit the synchronized metadata on
main. - Build only the affected component. Candidate workflows reserve or select the immutable
build-vX.Y.Zsource tag; they never accept a source or version override. - Test the exact Docker digest through
test, or test the Companion draft assets and promote them to the Companiontestfeed. - Repeat the loop with a new
Zvalue when a new candidate is required. Never rebuild or replace a published artifact under the same version.
Docker and Companion candidates may be built independently. Select an existing canonical build version when the second component must use a source commit that main has already advanced past.
Production Cutover Freeze
The release cutover is active as of 2026-07-20. Until the cutover is announced complete, permit only explicitly identified controlled test candidates through the current canonical-candidate workflows.
- Do not use legacy Docker or Companion publishing entry points.
- Do not promote
stableorbetathrough a legacy workflow. - Do not mix legacy publication with the canonical candidate, immutable-artifact, and pointer-only promotion workflows.
- End the freeze only after the cutover announcement and the first production publication and recovery paths have been monitored.
Documentation
- Review the homepage content and update it where necessary.
- Docs:
- Verify Supported File Formats and update as necessary.
- Finalize the target release’s What’s New page.
- Mark the target version as current in
website/data/docs-versions.toml. - Run the VS Code task Website: Refresh Docs Derived Artifacts.
- Review the Docs Structure Report this creates in
/workspace/website-meta/docs-reports/docs-structure-report.html.
- Git merge all changes.
Create The Public Release
See Overview .
- Run
Release: Create Public Sambee Releasewith the approved canonical build version and the intendeddocker,companion, orbothscope. - Review the generated draft and its required
sambee-release.jsonidentity asset. - Publish the draft only after the approved immutable artifacts exist. For
both, both artifact verifiers must agree on the version, build tag, and source SHA. - Publishing a Docker-authorized release triggers Release: Publish Docker Image , which moves only verified aliases. It never rebuilds the image.
Publish the Companion
See Overview
- Run
Release: Build Companion Artifact
from
mainor select an existing canonical build version. - Test and publish its immutable external draft release.
- Run
Release: Promote Companion Release
to move
test,beta,stable, and/or Sambee download metadata feeds without rebuilding binaries.