Verify the published tarball before Hex.pm release.
Usage
mix mailglass.publish.check
mix mailglass.publish.check --package mailglass
mix mailglass.publish.check --package mailglass_admin
mix mailglass.publish.check --package mailglass_inbound
mix mailglass.publish.check --package mailglass --keepOptions
--package- optional package selector (mailglass,mailglass_admin, ormailglass_inbound); when omitted, both packages are checked sequentially.--keep- preserve_publish_check/<pkg>/for inspection.
Pre-publish checks (in order)
- Installer goldens — asserts installer manifest has not drifted from the committed snapshot (mailglass package only; REL-04). Fails fast before the slower tarball build.
- Build and unpack tarball
- Compare allowlist
- Check denylist
- Check tarball size
- Check required files
- Check CHANGELOG section
- Check mix metadata
- Check dependency shapes
- Check linked-version constraint
- Check prod deps resolution
- Compile tarball in isolation
- Run hex.audit
- Capture hex.outdated advisory