This week was the first security release for which we staged the core releases in advance in a private Artifactory repository. It was a pretty big improvement for release day.
The next step would be to change the package creation and distribution script into two:
- Create Package and possibly upload to the destination host, or make otherwise available
- Move the prepared packages to the destination directory and poke the mirrors
Allow the security officer full control over when the packages should be made available (the second step). Make that process from start to general package availability to users as quick as possible.