portail 0.1.0

Unified proxy/gateway: AI Gateway + MCP Gateway + CDN cache
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82

# Release Process

## Prerequisites

- [ ] `CARGO_REGISTRY_TOKEN` set as GitHub secret (Settings → Secrets and variables → Actions)
- [ ] `CODECOV_TOKEN` set for coverage upload (optional)
- [ ] GitHub Actions permissions: "Read and write" + "Allow GitHub Actions to create releases"
- [ ] Container registry: ghcr.io package visibility set to public (Settings → Packages)

## One-time: crates.io credentials

Generate a token at https://crates.io/settings/tokens, then:

```bash
just login
```
Paste the token when prompted. Cargo stores it in `~/.cargo/credentials`.

Optional — keychain-backed storage:
```bash
cargo install cargo-credential-pass
# then add to ~/.cargo/config.toml:
# [registry]
# global-credential-providers = ["cargo-credential-pass"]
```

Verify:
```bash
just publish-dry
```

## Release steps

1. **Ensure main is clean**
   ```bash
   git checkout main && git pull
   just ci
   ```

2. **Bump version** (if not a patch release)
   - Update `version` in `Cargo.toml`
   - Update `CHANGELOG.md` date

3. **Tag and push**
   ```bash
   git tag v0.1.0
   git push --tags
   ```

4. **Verify workflows** (5-10 min)
   - [GitHub Actions](https://github.com/peterlodri-sec/portail/actions): `release.yml` + `docker.yml`
   - [GitHub Release](https://github.com/peterlodri-sec/portail/releases): binary artifacts + checksums + signatures
   - [ghcr.io](https://github.com/peterlodri-sec/portail/pkgs/container/portail): multi-arch image + tags
   - [crates.io](https://crates.io/crates/portail): package published

5. **Verify signatures**
   ```bash
   gh release download v0.1.0
   cosign verify-blob \
     --cert portail-x86_64-unknown-linux-gnu.pem \
     --signature portail-x86_64-unknown-linux-gnu.sig \
     portail-x86_64-unknown-linux-gnu
   ```

6. **Switch nix-base to GitHub source** (after v0.1.0)
   ```nix
   # in nix-base/flake.nix
   portail = {
     url = "github:peterlodri-sec/portail/v0.1.0";
     inputs.nixpkgs.follows = "nixpkgs";
   };
   ```

## Rollback

```bash
git tag -d v0.1.0               # delete local tag
git push --delete origin v0.1.0 # delete remote tag
# GitHub Release: edit → unpublish
# crates.io: yank
cargo yank --version 0.1.0
```