* Automate more of Wasmtime's release process This change revamps the release process for Wasmtime and intends to make it nearly 100% automated for major release and hopefully still pretty simple for patch releases. New workflows are introduced as part of this commit: * Once a month a PR is created with major version bumps * Specifically hinted commit messages to the `main` branch will get tagged and pushed to the main repository. * On tags we'll now not only build releases after running CI but additionally crates will be published to crates.io. In conjunction with other changes this means that the release process for a new major version of Wasmtime is simply merging a PR. Patch releases will involve running some steps locally but most of the nitty-gritty should be simply merging the PR that's generated. * Use an anchor in a regex
3.4 KiB
Release Process
This is intended to serve as documentation for Wasmtime's release process. It's largely an internal checklist for those of us performing a Wasmtime release, but others might be curious in this as well!
Releasing a major version
Major versions of Wasmtime are relased once-a-month. Most of this is automatic and all that needs to be done is to merge the GitHub PR that CI will generate on the second Monday of each month.
Specifically what happens for a major version release is:
- One day a month (configured via
.github/workflows/bump-version.yml) a CI job will run. This CI job will:
- Download the current
mainbranch - Run
./scripts/publish.rswith thebumpargument - Commit the changes with a special marker in the commit message
- Push these changes to a branch
- Open a PR with this branch against
main
- A maintainer of Wasmtime signs off on the PR and merges it.
- Most likely someone will need to push updates to
RELEASES.mdbeforehand. - A maintainer should double-check there are no open security issues.
- The
.github/workflow/push-tag.ymlworkflow is triggered on all commits tomain, including the one just created with a PR merge. This workflow will:- Scan the git logs of pushed changes for the special marker added by
bump-version.yml. - If found, tags the current
maincommit and pushes that to the main repository.
- Scan the git logs of pushed changes for the special marker added by
- Once a tag is created CI runs in full on the tag itself. CI for tags will
create a GitHub release with release artifacts and it will also publish
crates to crates.io. This is orchestrated by
.github/workflows/main.yml.
If all goes well you won't have to read up much on this and after hitting the Big Green Button for the automatically created PR everything will merrily carry on its way.
Releasing a patch release
Making a patch release is somewhat more manual than a major version. At this
time the process for making a patch release of 2.0.1 the process is:
- All patch release development should be happening on a branch
release-2.0.1.
- Maintainers need to double-check that the
PUBLIC_CRATESlisted inscripts/publish.rsdo not have semver-API-breaking changes (in the strictest sense). All security fixes must be done in such a way that the API doesn't break between the patch version and the original version.
- Locally check out
release-2.0.1and make sure you're up-to-date. - Run
rustc scripts/publish.rs - Run
./publish bump-patch - Update
RELEASES.md - Commit the changes. Include the marker
[automatically-tag-and-release-this-commit]in your commit message. - Make a PR against the
release-2.0.1branch. - Merge the PR when CI is green
- Note that if historical branches may need updates to source code or CI to pass itself since the CI likely hasn't been run in a month or so. When in doubt don't be afraid to pin the Rust version in use to the rustc version that was stable at the time of the branch's release.
From this point automated processes should take care of the rest of the steps,
basically resuming from step 3 above for major releases where push-tag.yml
will recognize the commit message and push an appropriate tag. This new tag will
then trigger full CI and building of release artifacts.