Our own documentation called the product Gitea. It is Hanzo Forge, so it now says so — README family, CONTRIBUTING, docs/, and the per-package READMEs. Three kinds of "Gitea" are not branding, and they stay: - MIT attribution: the copyright header template, the LICENSE, and the "white-label fork of Gitea" statement in each README. - Provenance: modules/git came from go-gitea/git, the Actions token design was proposed upstream in #24635, the base is 1.26.4 of go-gitea/gitea. - Addressing values: /data/gitea and /etc/gitea, the gitea-data PVC, the GITEA__ env prefix, X-Gitea-* headers. LLM.md's inventory of these is unchanged. Links that pointed at upstream infrastructure described a project this fork is not. Contributor issues, security reports and documentation now land here; the Crowdin sync, the GiteaBot backporter, the blog PR and the dl.gitea.com asset checks describe no lane this repo has, and the release section now records the one it does — tag, push to canonical, semver image, universe pin. Four references were dead as written, not merely upstream: - docs/setup.md is docs/build-setup.md - build/backport-locale.go does not exist - .github/workflows does not exist here; the workflows are .hanzo/workflows - the -X ldflags named code.gitea.io/gitea symbols, which this binary has none of, so the linker set nothing. The module path is github.com/hanzoai/git and cmd.PIDFile defaults to /run/gitd.pid. gitea help and gitea completion are gitd. gitea-runner is git-runner. The GitHub repo is hanzoai/forge now, so the clone and fork URLs point there. ghcr.io/hanzoai/git is untouched: a package is not renamed by a repo rename and the running deployment pins that image. The Go module path is untouched for the same reason — go.mod still declares github.com/hanzoai/git. Co-authored-by: Hanzo Dev <[email protected]>
4.8 KiB
Release management
This document describes the release cycle, backports, versioning, and the release manager checklist. For everyday contribution workflow, see CONTRIBUTING.md.
Backports and Frontports
What is backported?
We backport PRs given the following circumstances:
- Feature freeze is active, but
<version>-rc0has not been released yet. Here, we backport as much as possible. rc0has been released. Here, we only backport bug- and security-fixes, and small enhancements. Large PRs such as refactors are not backported anymore.- We never backport new features.
- We never backport breaking changes except when
- The breaking change has no effect on the vast majority of users
- The component triggering the breaking change is marked as experimental
How to backport?
Backports are opened by hand: cherry-pick the merged commit onto the release branch and open a PR against it.
Format of backport PRs
The title of backport PRs should be
<original PR title> (#<original pr number>)
The first two lines of the summary of the backporting PR should be
Backport #<original pr number>
with the rest of the summary and labels matching the original PR.
Frontports
Frontports behave exactly as described above for backports.
Release Cycle
We use a release schedule so work, stabilization, and releases stay predictable.
Cadence
- Aim for a major release about every three or four months.
- Roughly two or three months of general development, then about one month of testing and polish called the release freeze.
- Starting with v1.26 the release cycle will be more predictable and follow a more regular schedule.
Release schedule
We will try to publish a new major version every three months:
- v1.26.0 in April 2026
- v1.27.0 in June 2026
- v1.28.0 in September 2026
- v1.29.0 in December 2026
How is the release handled?
- The release manager will tag the release candidate (e.g.
v1.26.0-rc0) and publish it for testing in the first week of the release month. - If there are no major issues, the release manager will check with the other maintainers and then tag the final release (e.g.
v1.26.0) in the one or two weeks following the release candidate.
Feature freeze
- Merge feature PRs before the freeze when you can.
- Feature PRs still open at the freeze move to the next milestone. Watch Discord for the freeze announcement.
- During the freeze, a release branch takes fixes backported from
main. Release candidates ship for testing; the final release for that line is maintained from that branch.
Patch releases
During a cycle we may ship patch releases for an older line. For example, if the latest release is v1.2, we can still publish v1.1.1 after v1.1.0.
End of life (EOL)
We support per standard the last major release. For example, if the latest release is v1.26, we support v1.26 and v1.25, but not v1.24 anymore. We will only publish security fixes for the last major release, so if you are using an older release, please upgrade to a supported release as soon as possible. Also we always try to support the latest on main branch, so if you are using the latest on main, you should be fine.
Versions
Hanzo Forge has the main branch as a tip branch and has version branches
such as release/v1.19. release/v1.19 is a release branch and we will
tag v1.19.0 for binary download. If v1.19.0 has bugs, we will accept
pull requests on the release/v1.19 branch and publish a v1.19.1 tag,
after bringing the bug fix also to the main branch.
Since the main branch is a tip version, if you wish to run Hanzo Forge
in production, deploy a release tag. Every PR must be reviewed and must pass
the automatic tests before it is merged.
Cutting a release
The git tag is the version. The Makefile derives main.Version from git describe,
so the tag, the image tag and gitd --version are one fact.
- Land the changelog entry on the branch you are releasing from.
- Tag it and push the tag to
canonical(git.hanzo.ai/hanzoai/git), which is where CI runs:git tag -a vMAJOR.MINOR.PATCH && git push canonical vMAJOR.MINOR.PATCH. Pushing a tag to the GitHub mirror builds nothing. .hanzo/workflows/cicd.ymlthen publishesghcr.io/hanzoai/git:vMAJOR.MINOR.PATCHand the v-strippedMAJOR.MINOR.PATCH. A branch push gets onlysha-<sha7>-amd64.- Never
crane copyasha-image onto a semver name: the binary inside reports its commit instead of its version. - Rolling git.hanzo.ai onto the new tag is a separate, reviewed change to the
gitoperator App CR inhanzoai/universe. CD restores that pin on every poll, so akubectl patchdoes not hold.