From 00460630b88db80822e72fe15fde749054432212 Mon Sep 17 00:00:00 2001 From: Imani Manyara Date: Sat, 14 Nov 2026 04:57:57 -0500 Subject: [PATCH] Pin the shared Go release to simtabi/.github v0.1.0 simtabi/.github withdrew v1.0.0 and v1.0.1 and restarted at v0.1.0 (b3388da). --- .github/workflows/release.yml | 2 +- CHANGELOG.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 49f6b56..b0f69cf 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -43,7 +43,7 @@ jobs: contents: write id-token: write attestations: write - uses: simtabi/.github/.github/workflows/go-release.yml@767e0c01251dbbfc695d03dfdd73db48733e852e # v1.0.0 + uses: simtabi/.github/.github/workflows/go-release.yml@b3388da3d08193ab1b757bc89e1707196da1ca76 # v0.1.0 with: tag: ${{ inputs.tag || github.ref_name }} runs-on: macos-latest diff --git a/CHANGELOG.md b/CHANGELOG.md index 2457657..424274e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,7 +15,7 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). release download fails. ### Changed -- `release.yml` calls simtabi/.github's shared `go-release.yml` at its `v1.0.0` release (`767e0c0`), pinned as `@ # v1.0.0` so Dependabot can advance the commit and the tag comment together. The release adds optional inputs only (`node-version` among them) and changes nothing a caller passes. +- `release.yml` calls simtabi/.github's shared `go-release.yml` at its `v0.1.0` release (`b3388da`), pinned as `@ # v0.1.0` so Dependabot can advance the commit and the tag comment together. v0.1.0 replaces the withdrawn `v1.0.0` and `v1.0.1`: it adds optional inputs only (`node-version` among them), fetches every owned org's Go modules from git rather than proxy.golang.org, and changes nothing a caller passes. - `make check-build` asserts how many files it inspected in `build/`, not only that nothing is out of place: `make build` passes a floor of 2 (`targets.txt` and the binary) and `make cross` and `make dist` one per target plus `targets.txt` and `checksums.txt`, through `BUILD_LAYOUT_MIN`, so a check that reads an empty or wrong directory fails instead of passing. - **Binaries ship on the GitHub release only, built on a version tag or on request.** A pushed `vX.Y.Z` tag (or `vX.Y.Z-rc.N` pre-release) builds and