Skip to content

Release Policy

GitHub Releases are the canonical release record for Sigil Watermark. Each versioned release uses the package version from pyproject.toml as vX.Y.Z.

The docs deployment workflow is the only workflow that creates a canonical release automatically. After a successful deploy from main, it creates the vX.Y.Z tag and GitHub Release when that version has no release yet. If the release already exists, the workflow leaves it unchanged so historical release targets and notes are not rewritten.

The PyPI publishing workflow only runs for v* GitHub Releases. After a successful package publish, it updates that same release with immutable package publish evidence instead of creating another release.

Every automatically created or updated release note must include immutable evidence:

  • the source commit SHA
  • the GitHub Actions workflow run URL
  • the GitHub Actions run id

The existing v0.2.0 release predates this policy and is not rewritten by the automation. The next version bump is the first release governed by this policy.