From bc69dcb43887af49d23016ffcba77d0683d33a6b Mon Sep 17 00:00:00 2001 From: Duc-Tam Nguyen Date: Mon, 29 Jun 2026 19:24:37 +0700 Subject: [PATCH] Pin release actions and cosign to fixed versions Bump the release workflow to the action versions the channel repos already run and pin cosign to the 2.x line so signing keeps its detached .sig and .pem outputs instead of floating to a breaking cosign 3.x. --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 48a6666cf..139a6297c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,19 +16,19 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7.0.0 with: fetch-depth: 0 persist-credentials: false - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v6.4.0 with: go-version-file: go.mod check-latest: true - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v7 + uses: goreleaser/goreleaser-action@v7.2.2 with: distribution: goreleaser version: "~> v2"