How to resign your Release in case of a revoked Matrix42 Developer Identity

Issue a new Developer Identity

Since the old Matrix42 Developer Identity has been revoked and can no longer be used you should issue a new one for future signing of your Extension Releases.

You can read more about how to issue a Developer Identity here.

Recreate the affected Releases

You can find an overview of all affected Extension Releases in the E-Mail you received when the old Matrix42 Developer Identity got revoked.

Based on your Release cycle you will probably want to recover a few of these Releases and make them available in the Matrix42 Extension Gallery again.

We recommend at least guaranteeing the latest Release to be available, or in the best case the latest Release of each Major Version.

Follow the next steps for each Release you want to republish:

1. Navigate to the Extension Releases of the affected Extension inside the Matrix42 DevOps Portal.
2. Download the revoked Releases you want to recreate via the (Download) action. (Might be hidden in the  action menu.)
3. Unzip the contents of the downloaded Releases and open the package.json.
4. Increment the version field inside the package.json by its patch level.

5. Zip the edited package.json and the rest of the Release content.
6. Sign the Releases using your newly issued Matrix42 Developer Identity as described here.
7. Upload the signed Releases to the Extension in the Matrix42 DevOps Portal as described here.
8. Wait for the Release validation and publish the Release as described here.

Conclusion

You now have recreated and published the affected Extension Release without interrupting your normal Release cycle.

Customers who have installed the revoked Extension versions will now automatically get the required update on the next installation/update.