perf(ci): reduce repeated Windows release validation #38
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: KofTwentyTwo/MarkdownViewr.Windows#38
Reference in new issue
Block a user
The first public release has excessive elapsed time from repeated Windows validation. PR37 CI38322328976 started23:28:45Z; native UI finished around23:44Z, and the serial published/installed stable/dev job is still running after26 minutes. Both release tags then repeat the same gates on the same source commit, while the main push also triggers CI.
Measure phase durations and reduce duplicate validation/cold setup for releases from the same reviewed immutable source. Retain complete published and installed-channel coverage, channel coexistence/default preservation, strict signing and final-artifact verification, protected environments, and proof that reused evidence belongs to the exact trusted source/dependencies. Do not accept untrusted PR artifacts into signing jobs or skip required assertions.
Acceptance: document baseline and improved end-to-end stable/dev publication time; prove failure cases still block publishing and wrong-source evidence is rejected. This follow-up is not a prerequisite for the current release and does not authorize weakening checks.
Implemented in merged PR40. Tags now reuse genuine provider-bound required checks only when the complete Git tree equals the tested merged PR head. Source signature, merged-main association, required provider identities and latest successful check results are mandatory; boundary tests reject different source, missing/pending/failed checks, wrong providers and API failures. Fresh release build/core coverage/signing/final-distribution checks remain.
Actual stable production run38410286325 took 9m53s; dev run38410289420 took 10m32s, concurrently. Both final downloaded releases verified by14:19:04Z, 14m20s after stable run creation. The previous full source CI38322328976 took35m15s and was repeated after tagging; that redundant full test pass is removed. These are different phases, not a claim that identical full CI now takes10 minutes. All17 source technical requirements passed and all18 original branch requirements remain restored. Native MSI lifecycle, signed payloads, checksums/SBOM/provenance passed for both final releases. See issue33 for receipts/downloads.