* refactor: split Linux egui host from shared backend * fix: keep CI contracts portable across runners * fix(ci): preserve CRLF while removing qwen dependency * fix(ci): regenerate target lockfile and install ripgrep * fix(ci): gate desktop-only selection voice module * ci: limit native build parallelism on cross-platform runners * fix(host): expose blocking task seam to coordinator * fix(settings): avoid macOS default hotkey collision * docs: record cross-platform CI evidence * ci: expose Linux validation package artifact * ci: grant reusable Linux package permissions * refactor: remove legacy coordinator dictation facade * ci: skip unsupported MSI prerelease builds * ci: install minisign only for signed Linux releases * fix: keep test-only coordinator session helper * refactor: move style preview diagnostics into core * fix: import shared preferences type from core * refactor: centralize enabled vocabulary projection * ci: install ripgrep for Linux package gates * test: make source contract line-ending agnostic * fix: keep Linux desktop entry standards compliant * docs: expose core style diagnostics contract * ci: resolve Linux package version in app directory * refactor: centralize ASR vocabulary priority * fix: use shared vocabulary note constant * refactor: keep vocabulary priority inside core * test: retain starting-stop queue coverage * ci: scope Linux updater URL to the current repository * docs: close implementation and artifact evidence * docs: record final CI artifact evidence * fix(android): align updater plugin versions * fix(android): pin updater crate exactly * refactor(core): remove unused type anchor * docs: record final artifact runs * fix(remote-input): preserve beta status fields * fix(tauri): finish beta host merge * fix(asr): pass scoped operation to native qwen adapter * fix(macos): bundle mlx metallib as a resource * test(remote-input): update status wire contract * feat: share Less Computer voice flow with Linux * refactor(core): centralize host-independent runtime policy * refactor(core): complete 2.0 backend consolidation * fix(ci): prepare Sherpa after cache restore * fix(macos): route native model paths through Core store * fix(macos): use ModelStore catalog API * fix(ci): serialize macOS native test build * test(ci): preserve macOS cargo diagnostics * fix(macos): release input source lock before await * test(core): replace legacy hotkey injection gate * test(core): move Codex sandbox contract into Core * fix(core): close final runtime policy gaps * fix(windows): terminate coding agent process trees * fix(core): complete local model migration * fix(credentials): align Core LLM model account * fix(core): restore 1.x parity across shared backend * fix(android): complete shared backend stubs * fix: close cross-platform migration review gaps * fix: complete migration lifecycles and platform compatibility * docs: define desktop 2.0 acceptance and Linux handoff * fix: close desktop parity and session lifecycle gaps * fix: finish voice lifecycle and desktop feedback parity * fix: close desktop cancellation and feedback race gaps * fix: honor proxy settings and reject stale session effects * fix: dispatch native cleanup on host runtimes and order events * fix: keep optional recording effects best effort * fix: close desktop agent model and QA lifecycle gaps * fix: preserve desktop raw voice and QA turn ownership * fix: finalize desktop dictation and QA feedback
5.1 KiB
Releasing OpenLess
This document defines who may cut releases and how. It is policy, not a how-to for day-to-day development.
Authority: admins only
Only repository administrators may create version tags and publish releases.
- Only an admin may create a release tag (
v*-tauri), invoke the Linux asset workflow for an existing release, or publish a GitHub Release. - Contributors (including AI agents) must not create release tags, publish releases, or trigger release automation. If a release is needed, request an admin to cut it — open an issue or ping a maintainer with the target version and the channel (Beta or Stable).
- Release automation (CI workflows that build, sign, and publish artifacts, and the auto-updater feed) must be admin-triggered only. Tag-triggered pipelines are considered admin-triggered because only admins may push the triggering tag.
Channels and tags
Two channels; the branch name equals the channel name:
beta— default development branch and the Beta channel.main— the Stable channel (正式版). Always releasable; only maintainers mergebeta → main.
Tauri host release tags (created by an admin only):
- Stable release: push tag
v<version>-tauri. - Beta release: push tag
v<X.Y.Z>-Beta.<N>-tauri, for examplev1.3.15-Beta.1-tauri(published as a GitHub pre-release; never auto-updates Stable users). The updater still recognizes the historical*-beta-taurisuffix for existing releases, but new releases use theBeta.<N>form.
These tags publish the macOS, Windows, and Android Tauri hosts. Linux is not part of the Tauri matrix. Its independent host is built by .github/workflows/release-linux-egui.yml, which accepts an existing release_tag and writes latest-linux-egui-x86_64.json. This workflow has no automatic tag trigger; Linux publication requires its own product acceptance below.
Under the 2026-09-06 2.0 requirements, Windows and macOS must fully retain their respective Tauri 1.x features. This first delivery includes a usable Core contract and a split handoff directory for Linux; the egui team owns remaining Linux Host/UI work and Linux product acceptance. Incomplete Linux application features do not independently block this Windows/macOS delivery. Shared Core defects and the desktop platforms' own acceptance requirements still do. Existing Android builds do not expand this scope into a new full-support commitment.
Version-sync gate
A Tauri release fails CI unless five locations carry the same version. Bump them together
with scripts/bump-version.sh <X.Y.Z>:
openless-all/app/package.jsonopenless-all/app/package-lock.json(root and nestedpackages."")openless-all/app/src-tauri/tauri.conf.jsonopenless-all/app/src-tauri/Cargo.tomlopenless-all/app/src-tauri/Cargo.lock(thename = "openless"block)
The root openless-all/app/Cargo.lock belongs only to the framework-independent core/Linux workspace and is not one of the five Tauri application version locations.
License boundary
Published 1.x releases remain MIT. 2.0.0-Beta.1 is the effective boundary for
the repository's AGPL-3.0-only license; third-party vendor files retain their
own MIT, Apache, LGPL, or other upstream terms.
The script takes a plain X.Y.Z; for a prerelease version such as
X.Y.Z-Beta.N, edit the files by hand.
Pre-release checklist (for the admin cutting the release)
- Branch is the intended channel (
betafor Beta,mainfor Stable). - All five version files match (version-sync gate green).
- CI is green on the commit being tagged.
- The applicable desktop feature and device acceptance, signing, and distribution requirements are met; green builds alone do not establish product readiness.
- Then, and only then, push the release tag.
Before attaching Linux assets, additionally require all of the following:
- The egui team has completed the Linux Host/UI gaps and acceptance. The existing
eframe::Appis a starting implementation; its presence and successful packaging alone do not establish product completeness. - Linux core/host tests, dependency gates, and secret-surface gates are green on Ubuntu.
- The manual Linux workflow verifies the ELF dependency list, deb/rpm/AppImage contents, desktop metadata, fcitx5 plugin paths, minisign output, and independent updater manifest.
- An admin passes the already published Tauri release tag as
release_tag; a non-empty tag also requiresLINUX_EGUI_MINISIGN_SECRET_KEY.
Process summary
- Land work on
betavia PRs (open PRs againstbeta, nevermain). - For a Stable release, a maintainer merges
beta → main. - An admin bumps the Tauri version (five-location sync), verifies CI is green, and pushes the release tag, which triggers the macOS/Windows/Android publish and auto-update pipeline.
- After Linux product acceptance and packaging have passed on its native runner, an admin invokes the independent Linux workflow against that existing tag.