Skip to content

Instantly share code, notes, and snippets.

@castrojo
Created June 11, 2026 20:00
Show Gist options
  • Select an option

  • Save castrojo/e66b7d8fbee2f9300344ece0093c665e to your computer and use it in GitHub Desktop.

Select an option

Save castrojo/e66b7d8fbee2f9300344ece0093c665e to your computer and use it in GitHub Desktop.
Design C promotion PR — all image repos (bluefin, dakota, bluefin-lts) — projectbluefin/actions
markers

Repos covered: 1. projectbluefin/bluefin — squash workflow, 2 variants, e2e smoke+common 2. projectbluefin/dakota — digest workflow, 2 variants, no e2e 3. projectbluefin/bluefin-lts — different model (direct lts builds, no promotion PR)

Each "live" repo shows three states: State 1 — promote job just ran, gate ⏳ pending State 2 — gate ✅ all passed State 3 — gate ❌ blocked (bluefin only — demonstrates failure case) -->


projectbluefin/bluefin

PR title: ci(promote): bluefin testing → stable 2026-06-11

State 1 — promote job ran, gate pending


🦕 Bluefin testing → stable · 2026-06-11

12 days since the last stable release · stable-20260530-abc1234 ↗
Auto-maintained by promote-testing-to-main.yml · Updated 2026-06-11T18:42:00Z · Run ↗

Release checklist

Check Status Details
Digest resolution ⏳ checking…
Cosign signatures ⏳ checking…
E2E ⏳ checking…

Variants being promoted

Variant Tag
bluefin :testing
bluefin-nvidia :testing

Changes since last stable

54 commits ahead of stable · Compare main…testing ↗

Recent commits (showing last 10)
SHA Subject
abc1234 feat: ship GNOME 47.5 and kernel 6.12.25
def5678 fix: resolve Wayland crash on multi-monitor setups
e5f6a7b chore: update cosign to 2.4.0
b8c9d0e feat: add starship prompt and eza by default
f1a2b3c fix: nvidia driver compatibility with kernel 6.12
d4e5f6a chore: bump podman 5.2.1 → 5.2.4
7b8c9d0 feat: enable zoxide, replace exa with eza
e1f2a3b fix: selinux policy for toolbox containers
4c5d6e7 chore: update rust 1.81 → 1.82, golang 1.23.1 → 1.23.2
f8a9b0c docs: update release verification instructions

✅ Merge to publish the stable release once the checklist above is green.


State 2 — gate passed ✅


🦕 Bluefin testing → stable · 2026-06-11

12 days since the last stable release · stable-20260530-abc1234 ↗
Auto-maintained by promote-testing-to-main.yml · Updated 2026-06-11T18:42:00Z · Run ↗

Release checklist

✅ All checks passed

Check Status Details
Digest resolution ✅ passed 2 variants resolved from :testing
Cosign signatures ✅ passed All signatures verified via Sigstore
E2E (smoke, common) ✅ passed Run 27398765432 · 23 min ago

Variants being promoted

Variant Tag
bluefin :testing
bluefin-nvidia :testing

Changes since last stable

54 commits ahead of stable · Compare main…testing ↗

Recent commits (showing last 10)
SHA Subject
abc1234 feat: ship GNOME 47.5 and kernel 6.12.25
def5678 fix: resolve Wayland crash on multi-monitor setups
e5f6a7b chore: update cosign to 2.4.0
b8c9d0e feat: add starship prompt and eza by default
f1a2b3c fix: nvidia driver compatibility with kernel 6.12
d4e5f6a chore: bump podman 5.2.1 → 5.2.4
7b8c9d0 feat: enable zoxide, replace exa with eza
e1f2a3b fix: selinux policy for toolbox containers
4c5d6e7 chore: update rust 1.81 → 1.82, golang 1.23.1 → 1.23.2
f8a9b0c docs: update release verification instructions

✅ Merge to publish the stable release once the checklist above is green.


State 3 — gate blocked ❌


🦕 Bluefin testing → stable · 2026-06-11

12 days since the last stable release · stable-20260530-abc1234 ↗
Auto-maintained by promote-testing-to-main.yml · Updated 2026-06-11T18:42:00Z · Run ↗

Release checklist

❌ Gate blocked

Check Status Details
Digest resolution ✅ passed 2 variants resolved from :testing
Cosign signatures ❌ failed Signature verification failed for bluefin-nvidia
E2E (smoke, common) ⏭️ skipped Blocked by prior check failure

Variants being promoted

Variant Tag
bluefin :testing
bluefin-nvidia :testing

Changes since last stable

54 commits ahead of stable · Compare main…testing ↗

Recent commits (showing last 10)
SHA Subject
abc1234 feat: ship GNOME 47.5 and kernel 6.12.25
def5678 fix: resolve Wayland crash on multi-monitor setups
e5f6a7b chore: update cosign to 2.4.0
b8c9d0e feat: add starship prompt and eza by default
f1a2b3c fix: nvidia driver compatibility with kernel 6.12
d4e5f6a chore: bump podman 5.2.1 → 5.2.4
7b8c9d0 feat: enable zoxide, replace exa with eza
e1f2a3b fix: selinux policy for toolbox containers
4c5d6e7 chore: update rust 1.81 → 1.82, golang 1.23.1 → 1.23.2
f8a9b0c docs: update release verification instructions

✅ Merge to publish the stable release once the checklist above is green.


projectbluefin/dakota

PR title: ci(promote): dakota testing → stable 2026-06-11

State 1 — promote job ran, gate pending


🦕 Dakota testing → stable · 2026-06-11

5 days since the last stable release · stable-20260606-def5678 ↗
Auto-maintained by promote-testing-to-main.yml · Updated 2026-06-11T18:42:00Z · Run ↗

Release checklist

Check Status Details
Digest resolution ⏳ checking…
Cosign signatures ⏳ checking…
E2E ⏳ checking…

Variants being promoted

Variant Tag Digest
dakota :testing sha256:a1b2c3d4e5f6a1b2
dakota-nvidia :testing sha256:b2c3d4e5f6a7b8c9

✅ Merge to publish the stable release once the checklist above is green.


State 2 — gate passed ✅ (no e2e)


🦕 Dakota testing → stable · 2026-06-11

5 days since the last stable release · stable-20260606-def5678 ↗
Auto-maintained by promote-testing-to-main.yml · Updated 2026-06-11T18:42:00Z · Run ↗

Release checklist

✅ All checks passed

Check Status Details
Digest resolution ✅ passed 2 variants resolved from :testing
Cosign signatures ✅ passed All signatures verified via Sigstore
E2E ⏭️ skipped Disabled by caller

Variants being promoted

Variant Tag Digest
dakota :testing sha256:a1b2c3d4e5f6a1b2
dakota-nvidia :testing sha256:b2c3d4e5f6a7b8c9

✅ Merge to publish the stable release once the checklist above is green.


projectbluefin/bluefin-lts

🦕 Bluefin LTS — no promotion PR (different release model)

Bluefin LTS does not use the testing → stable promotion PR pattern.

Instead it builds directly on the lts branch via a weekly scheduled workflow (scheduled-lts-release.yml) that:

  1. Triggers all 5 LTS build variants in parallel
  2. Waits for completion
  3. Calls generate-release.yml which creates a GitHub Release directly

There is no long-lived "promotion PR" to keep a rolling status on.

If bluefin-lts adopts a promotion PR model in future, the Design C body would look like this:


🦕 Bluefin LTS testing → stable · 2026-06-11

7 days since the last stable release · lts-20260604-ghi9012 ↗
Auto-maintained by promote-lts-to-stable.yml · Updated 2026-06-11T18:42:00Z · Run ↗

Release checklist

✅ All checks passed

Check Status Details
Digest resolution ✅ passed 6 variants resolved from :lts
Cosign signatures ✅ passed All signatures verified via Sigstore
E2E (lts) ✅ passed Run 27399999999 · 41 min ago

Variants being promoted

Variant Tag
bluefin-lts :lts
bluefin-lts-nvidia :lts
bluefin-lts-dx :lts
bluefin-lts-dx-nvidia :lts
bluefin-lts-hwe :lts
bluefin-lts-dx-hwe :lts

✅ Merge to publish the LTS stable release once the checklist above is green.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment