From 67f8447a0d9ba4afeeed35c9d2135b4278698d96 Mon Sep 17 00:00:00 2001 From: Jon Langevin Date: Sun, 24 May 2026 03:48:20 -0400 Subject: [PATCH] =?UTF-8?q?ci:=20bump=20wfctl=20pin=20v0.63.1=20=E2=86=92?= =?UTF-8?q?=20v0.63.2=20(workflow#765=20implementation=20actually=20shippe?= =?UTF-8?q?d)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v0.63.1 was tagged at a commit that did NOT include the verify-capabilities subcommand (PR #766 squash-merge ran against stale remote ref; implementation commits stayed local). v0.63.2 (tagged at PR #769 merge) ships the actual subcommand. This PR bumps the release.yml pin so the new step ('wfctl plugin verify-capabilities --binary ... .') resolves to a binary that has the subcommand. --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 609bce4..01b36ee 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,12 +20,12 @@ jobs: go-version-file: go.mod - name: Install Syft for SBOM generation uses: anchore/sbom-action/download-syft@v0 - - name: Install wfctl v0.63.1 + - name: Install wfctl v0.63.2 run: | mkdir -p "${RUNNER_TEMP}/wfctl-bin" curl -sSfL -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \ -o "${RUNNER_TEMP}/wfctl-bin/wfctl" \ - "https://github.com/GoCodeAlone/workflow/releases/download/v0.63.1/wfctl-linux-amd64" + "https://github.com/GoCodeAlone/workflow/releases/download/v0.63.2/wfctl-linux-amd64" chmod +x "${RUNNER_TEMP}/wfctl-bin/wfctl" - name: Validate plugin contract for publish (pre-build) run: "${{ runner.temp }}/wfctl-bin/wfctl plugin validate-contract --for-publish --tag ${{ github.ref_name }} ."