Check the version API before downloading a release - #4
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The first automated release stopped before building because the download URL for the unpublished gem returned HTTP 403. Check the RubyGems version API first, where an absent version returns 404, then download and hash the package when the version exists.
API errors and unavailable downloads for existing versions still stop publication. Add regression coverage for unpublished versions, published package digests, API errors, and missing or forbidden downloads; update the recovery fixture for the lookup arguments.
Validation: 19 tests / 55 assertions pass; RuboCop passes. Live read-only checks recognize
bake-gem-github0.0.1 as unpublished and match the downloadedbake-gem0.15.0 digest to its locally cached package.The failed v0.0.1 run has not built or uploaded a package. Its checkout remains pinned to the original merged source, so rerunning that run alone will not load this fix.