Commit d55ee8f95d0227224d14dfd9e9c75913b034170b

Authored by Jay Berkenbilt
1 parent e1af26a3

Minor fixes to release instructions

Showing 1 changed file with 8 additions and 2 deletions
README-maintainer.md
... ... @@ -607,6 +607,12 @@ When done, the following should happen:
607 607  
608 608 ## CREATING A RELEASE
609 609  
  610 +* Until qpdf 13: see also README-maintainer.md from v12.2.0 for
  611 + additional gpg signing steps. This includes signing the releases
  612 + with gpg. Do this before running cosign. Also use `git tag -s`
  613 + instead of `git tag -a`. When we deprecate gpg signing, this can be
  614 + removed.
  615 +
610 616 * Releases are signed using
611 617 [cosign](https://docs.sigstore.dev/quickstart/quickstart-cosign/)
612 618 using your GitHub identity. If you are creating a release, please
... ... @@ -649,7 +655,7 @@ chmod 555 *.AppImage
649 655  
650 656 ```sh
651 657 git rev-parse qpdf/main @
652   -git tag -s v$version @ -m"qpdf $version"
  658 +git tag -a v$version @ -m"qpdf $version"
653 659 git push qpdf v$version
654 660 ```
655 661  
... ... @@ -673,7 +679,7 @@ git push qpdf @:stable
673 679 GITHUB_TOKEN=$(qdata-show cred github-token)
674 680 function gcurl() { curl -H "Authorization: token $GITHUB_TOKEN" ${1+"$@"}; }
675 681  
676   -url=$(gcurl -s -XPOST https://api.github.com/repos/qpdf/qpdf/releases -d'{"tag_name": "v'$version'", "name": "qpdf '$ver
  682 +url=$(gcurl -s -XPOST https://api.github.com/repos/qpdf/qpdf/releases -d'{"tag_name": "v'$version'", "name": "qpdf '$version'", "draft": true}' | jq -r '.url')
677 683  
678 684 # Get upload url
679 685 upload_url=$(gcurl -s $url | jq -r '.upload_url' | sed -E -e 's/\{.*\}//')
... ...