Release is blocked on a snapshot foundation parent while CHANGELOG 0.1.0 reads as shipped #10

New Issue

2026-10-01T22:50:38Z

KofTwentyTwo commented

2026-10-01 22:50:38 +00:00

(Migrated from github.com)

Summary

pom.xml:11 inherits com.kof22:kof22-agent-parent:0.5.0-SNAPSHOT, which itself pins timestamped QQQ 4.1 snapshots (foundation issue KofTwentyTwo/kof22-agent-foundation#19). Carl's scripts/release-policy.py correctly rejects snapshot dependencies for RC/stable, so no Carl release can be cut. gh release list is empty. CHANGELOG.md:3 nevertheless has a dated ## [0.1.0] - 2026-09-30 section listing "signed release evidence ... stable versions" under Added, which reads as if 0.1.0 shipped.

Suggested resolution

Track the foundation's non-snapshot closure, pin Carl to the resulting immutable parent, and reword the changelog section as unreleased until then.

Priority rationale

P1: release channel blocked; changelog misstates delivery.

Filed from the 2026-10-01 real-versus-fake audit of Carl (branch feature/cicd-liquibase-gitops, HEAD 5414d7a, main 1b334d1). Four read-only reviews covered domain and services, QQQ metadata and data model, tests/CI/evidence, and docs/integrations. A local offline build of a Carl copy against the installed foundation 0.5.0-SNAPSHOT is in progress; its result will be added as a comment. Existing issues #3, #4 and #5 (real Monarch accounts, Authentik with real data, CI/CD with Liquibase and ArgoCD) are referenced rather than duplicated.

## Summary `pom.xml:11` inherits `com.kof22:kof22-agent-parent:0.5.0-SNAPSHOT`, which itself pins timestamped QQQ 4.1 snapshots (foundation issue KofTwentyTwo/kof22-agent-foundation#19). Carl's `scripts/release-policy.py` correctly rejects snapshot dependencies for RC/stable, so no Carl release can be cut. `gh release list` is empty. `CHANGELOG.md:3` nevertheless has a dated `## [0.1.0] - 2026-09-30` section listing "signed release evidence ... stable versions" under Added, which reads as if 0.1.0 shipped. ## Suggested resolution Track the foundation's non-snapshot closure, pin Carl to the resulting immutable parent, and reword the changelog section as unreleased until then. ## Priority rationale P1: release channel blocked; changelog misstates delivery. --- Filed from the 2026-10-01 real-versus-fake audit of Carl (branch `feature/cicd-liquibase-gitops`, HEAD `5414d7a`, main `1b334d1`). Four read-only reviews covered domain and services, QQQ metadata and data model, tests/CI/evidence, and docs/integrations. A local offline build of a Carl copy against the installed foundation 0.5.0-SNAPSHOT is in progress; its result will be added as a comment. Existing issues #3, #4 and #5 (real Monarch accounts, Authentik with real data, CI/CD with Liquibase and ArgoCD) are referenced rather than duplicated.

This repo is archived. You cannot comment on issues.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/carl#10