From 3ca37ec6ba345be4446cd9c295245604c45f3219 Mon Sep 17 00:00:00 2001 From: Duc-Tam Nguyen Date: Mon, 29 Jun 2026 19:06:24 +0700 Subject: [PATCH] Pin release actions and cosign to fixed versions Bump the release workflow to the action versions the channel repos already run and pin cosign to the 2.x line so signing keeps its detached .sig and .pem outputs instead of floating to a breaking cosign 3.x. --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 04a41fe..baaf903 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,7 +30,7 @@ jobs: - uses: actions/checkout@v7.0.0 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v6.4.0 with: go-version-file: go.mod check-latest: true @@ -55,7 +55,7 @@ jobs: - uses: actions/checkout@v7.0.0 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v6.4.0 with: go-version-file: go.mod check-latest: true