From ec10a7450769e91053041fed96a2cdd321ba111a Mon Sep 17 00:00:00 2001
From: JohnBraham <johnbraham1978@outlook.com>
Date: Tue, 10 Nov 2026 14:17:23 +0000
Subject: [PATCH] Keep the audited Base Gems 1.11.2 release bundle

---
 .github/workflows/ci.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 22f967d..a540129 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -59,3 +59,27 @@ jobs:
             -Dorg.gradle.java.installations.auto-detect=false \
             -Dorg.gradle.java.installations.auto-download=false
           sha256sum build/libs/*.jar
+
+      - name: Prepare the audited release bundle
+        id: bundle
+        shell: bash
+        run: |
+          set -euo pipefail
+          version="$(sed -n 's/^mod_version=//p' gradle.properties)"
+          bundle="$RUNNER_TEMP/release-bundle"
+          mkdir -p "$bundle"
+          cp "build/libs/BaseGems-$version"{,-sources,-javadoc}.jar "$bundle/"
+          cp build/release/SHA256SUMS "$bundle/"
+          awk '/^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ for Minecraft / { if (++sections > 1) exit }
+               sections == 1 { print }' CHANGELOG.txt > "$bundle/CHANGELOG.txt"
+          grep -Fxq "$version for Minecraft 1.11.2" "$bundle/CHANGELOG.txt"
+          (cd "$bundle" && sha256sum --check --strict SHA256SUMS)
+          echo "path=$bundle" >> "$GITHUB_OUTPUT"
+
+      - name: Upload audited release bundle
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: BaseGems-1.11.2-${{ github.sha }}
+          path: ${{ steps.bundle.outputs.path }}/*
+          if-no-files-found: error
+          retention-days: 90