tag

Overview ¶

Tag Release creates a new Boulder release tag and pushes it to GitHub. It ensures that the release tag points to the correct commit, has standardized formatting of both the tag itself and its message, and is GPG-signed.

It always produces Semantic Versioning tags of the form v0.YYYYMMDD.N, where:

• the major version of 0 indicates that we are not committing to any backwards-compatibility guarantees;
• the minor version of the current date provides a human-readable date for the release, and ensures that minor versions will be monotonically increasing; and
• the patch version is always 0 for mainline releases, and a monotonically increasing number for hotfix releases.

Usage:

go run github.com/letsencrypt/boulder/tools/release/tag@main [-push] [branchname]

If the "branchname" argument is not provided, it assumes "main". If it is provided, it must be either "main" or a properly-formatted release branch name.

If the -push flag is not provided, it will simply print the details of the new tag and then exit. If it is provided, it will initiate a push to the remote.

In all cases, it assumes that the upstream remote is named "origin".