FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

ci(release): publish Vector artifacts to COSE bucket by pront · Pull Request #26154 · vectordotdev/vector · GitHub

/ vector Public

ci(release): publish Vector artifacts to COSE bucket - #26154

Merged
pront merged 5 commits into
masterfrom
pront-cose-release-bucket-publishing
Aug 20, 2026
ConversationCommits (5)ChecksFiles changed
Merged

ci(release): publish Vector artifacts to COSE bucket#26154
pront merged 5 commits into
masterfrom
pront-cose-release-bucket-publishing

Conversation

pront commented Aug 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Summary

Publish Vector artifacts to the COSE-owned dd-cose-releases bucket using GitHub OIDC.

Motivation

Vector release artifacts are moving from packages.timber.io to the COSE-managed public bucket. Future nightly and custom builds must publish only to the new bucket. Stable releases remain available from both buckets during the migration window.

Changes

  • Assume the least-privilege vector-release-publisher-github-actions role with GitHub OIDC.
  • Publish nightly and custom artifacts to dd-cose-releases/vector/ without public ACLs.
  • Dual-publish stable releases to packages.timber.io and dd-cose-releases during the migration window.
  • Verify downloads from the public S3 endpoint and isolate legacy static credentials from OIDC session credentials.

References

Related: #26104

Vector configuration

N/A

How did you test this PR?

  • git diff --check
  • bash -n scripts/release-s3.sh
  • shellcheck scripts/release-s3.sh
  • Parsed the changed workflow YAML files.
  • Simulated nightly, custom, and stable dual-publish commands with mocked AWS and download clients. Legacy commands retained --acl public-read; the new bucket never received it.
  • Ran the Custom Builds workflow from this branch with publishing enabled: https://github.com/vectordotdev/vector/actions/runs/32316848983
    • The complete workflow and Custom / Publish to S3 job succeeded using GitHub OIDC.
    • Published 19 artifacts (828.8 MiB) to s3://dd-cose-releases/vector/custom/0.58.0.custom.9911185/.
    • Listed the published objects using the human SSO operator role.
    • Verified that an uploaded archive is publicly downloadable from the S3 endpoint with HTTP 200.

Is this a breaking change?

  • Yes
  • No

Does this PR include user facing changes?

  • Yes. Please add a changelog fragment based on our guidelines.
  • No. A maintainer will apply the no-changelog label to this PR.

github-actions Bot added domain: ci Anything related to Vector's CI environment domain: releasing Anything related to releasing Vector labels Aug 19, 2026
pront force-pushed the pront-cose-release-bucket-publishing branch from 283086f to 4d9209f Compare August 19, 2026 17:13
pront added the no-changelog Changes in this PR do not need user-facing explanations in the release changelog label Aug 19, 2026
pront marked this pull request as ready for review August 19, 2026 17:24
pront requested a review from a team as a code owner August 19, 2026 17:24
chatgpt-codex-connector Bot reviewed Aug 19, 2026
View reviewed changes

chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4d9209f0b9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/release-s3.sh
Comment thread scripts/release-s3.sh
Comment thread .github/workflows/publish.yml
pront requested a review from a team as a code owner August 19, 2026 22:23
github-actions Bot added docs review on hold The documentation team reviews PRs only after a PR is approved by the COSE team. domain: external docs Anything related to Vector's external, public documentation labels Aug 19, 2026
chatgpt-codex-connector Bot reviewed Aug 19, 2026
View reviewed changes

chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 49594b0e84

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread website/cue/reference/urls.cue Outdated

pront commented Aug 19, 2026

Copy link
Copy Markdown
Member Author

@codex review

chatgpt-codex-connector Bot reviewed Aug 19, 2026
View reviewed changes

chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8a1f4e6b2a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread website/layouts/partials/download/download-matrix.html Outdated
github-actions Bot removed the docs review on hold The documentation team reviews PRs only after a PR is approved by the COSE team. label Aug 20, 2026
pront added this pull request to the merge queue Aug 20, 2026
pront mentioned this pull request Aug 20, 2026
Merged
4 tasks
Merged via the queue into master with commit 19e22ff Aug 20, 2026
83 checks passed
pront deleted the pront-cose-release-bucket-publishing branch August 20, 2026 15:28
github-actions Bot locked and limited conversation to collaborators Aug 20, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

chatgpt-codex-connector[bot] chatgpt-codex-connector[bot] left review comments
thomasqueirozb thomasqueirozb approved these changes

Assignees

No one assigned

Labels

domain: ci Anything related to Vector's CI environment domain: external docs Anything related to Vector's external, public documentation domain: releasing Anything related to releasing Vector no-changelog Changes in this PR do not need user-facing explanations in the release changelog

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

Back | FazBrowse Home | New Git URL