chore(release): libsrt1.5-ceralive 1.5.6+ceralive.1 + package-contract tests#20
Merged
Conversation
Bump the libsrt1.5-ceralive runtime package to 1.5.6+ceralive.1 now that master carries upstream v1.5.6 (KMREQ CVE fixes). Update the release-workflow default, the runtime-package verify path, and the versioned Provides for both Debian TLS flavors (= 1.5.6). Extend package-contract.sh to statically assert the deb version, Provides/Conflicts/Replaces, the libsrt.so.1.5 SONAME, and that neither workflow retains a stale 1.5.5 reference.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Cut the
libsrt1.5-ceraliveruntime release 1.5.6+ceralive.1 now thatmastercarries upstream SRT v1.5.6 (KMREQ CVE fixes, merged in #19). Truths-up all stale1.5.5packaging/workflow metadata and hardens the package-contract test to catch this class of drift statically.packaging/build-deb.sh: default version1.5.5+ceralive.1→1.5.6+ceralive.1; versionedProvidesfor both Debian TLS flavors(= 1.5.5)→(= 1.5.6)..github/workflows/publish-release.yml:workflow_dispatchversion input default →1.5.6+ceralive.1..github/workflows/runtime-package.yml:verify-runtime-replacement.shdeb path →1.5.6+ceralive.1.packaging/package-contract.sh: extended from a handful of build-flag greps into a full static contract — asserts the deb version,Provides/Conflicts/Replaces(both TLS flavors), thelibsrt.so.1.5SONAME, and that neither workflow retains a stale1.5.5. Each check names the offending field on failure.Conflicts/Replacesare unchanged (unversioned, still correct).abi.yml'sSRT_BASE: reorderfreeze-1.5.5is a branch name, not a version — intentionally untouched.Why
The runtime package version must track the upstream release it is built from; leaving
1.5.5metadata on a v1.5.6 tree ships a mislabelled deb and an inaccurate versionedProvides. The old contract test only checked build flags, so a version/Provides/workflow-default drift passed CI silently.How to verify
bash packaging/package-contract.sh→package-contract: OK (1.5.6+ceralive.1 / Provides (= 1.5.6)).CeraLive SRT Runtimeworkflow (runtime-package.yml) runs the contract + full replacement gate on this PR.Risks
Low. Metadata + test only — no C/C++ source or build-flag changes. The versioned
Providesbump to(= 1.5.6)still satisfies every downstreamlibsrt1.5-gnutls/libsrt1.5-openssldependency (Debian's stable pins are>=-style / unversioned via the SONAME).