Release checklist still hand-edits version and draft state into the docs pages
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 75/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- go
- Domain
- documentation, release
Research direction
Start with .github/ISSUE_TEMPLATE/release.yaml, especially the --artifact-version option and the manual steps at lines 27, 29, and 40, then trace the baseline-compiler compile entry point. Verify the generated docs/versions/.md, -checklist.md, and -crosswalk.md use the release version and omit the pre-release warning, and that the corresponding manual checklist items are removed.
Written by the indexing model from the issue text.
Description
🤖 WIP issue, drafted by Claude during review of #550.
#550 automates release-version and draft-state stamping for the artifacts published to grc.store. The equivalent work for the docs site is still a manual checklist item, and it is what #544/#545 had to clean up after v2026.08.28.
.github/ISSUE_TEMPLATE/release.yaml currently asks a human to:
- line 27 — change
Version: develto the release number indocs/versions/<VERSION>.md - line 29 — remove the "not for production use" warning from the same file
- line 40 — update the headers in
docs/versions/<VERSION>-checklist.mdand-crosswalk.md
These are the same class of staleness #550 fixes: a value that tracks devel in-repo and has to become the release version in the published output. Doing it by hand is why a release can ship with the wrong version and warning text still in place.
The compiler already takes --artifact-version (line 23 of the same template) to pin mapping-document links to the release tag, so there is an existing seam to extend rather than a new mechanism to invent.
Suggested scope: have baseline-compiler compile derive the version header and drop the pre-release warning from --artifact-version, and delete the corresponding manual steps from the release template.
- Dominant language
- Go
- Stars
- 166
- Forks
- 44
- Avg merge
- 1d 7h
- Merged PRs (30d)
- 13
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from ossf/security-baseline
-
Difficulty 3/5 1-2 days Newbie friendliness 68/100
ossf/security-baseline#546 ·
-
criteria
Difficulty 5/5 Over a week Newbie friendliness 30/100
ossf/security-baseline#536 ·
-
documentation
ossf/security-baseline#511 · 4 comments · 3 assignees ·
-
ossf/security-baseline#486 · 7 assignees ·
-
ossf/security-baseline#454 · 1 assignee ·
All issues in ossf/security-baseline
Similar issues
-
optimization optimization:agents-md-curator
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
githubnext/gh-aw-cao#13143 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
blinklabs-io/bursa#904 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
yanet-platform/ipfw-go#129 ·
-
bug confmap/provider/googlesecretmanagerprovider needs triage
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
open-telemetry/opentelemetry-collector-contrib#51273 · 2 comments ·
-
bug: AI Gateway client filter lists "Unknown" twice when NULL and literal Unknown clients coexist Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 90/100