ci: pin release-publish-oci to v1.4.0 - #8
Merged
Merged
Conversation
The reusable workflow was consumed from @main, so every release ran against whatever was on that branch at the time. v1.4.0 is the first tag that contains release-publish-oci.yml — it landed in September and v1.3.2 is from May — so the reference can finally be a version.
timossileandro
self-requested a review
September 14, 2026 19:28
timossileandro
approved these changes
Sep 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
This repository consumes the reusable release workflow from
@main:So every release runs against whatever is on that branch at the time. A change there lands in this repo's next release without anyone choosing it.
Why it was
@mainuntil nowThere was no tag to point at.
release-publish-oci.ymllanded inactions-nullplatformin September 2026; the newest tag wasv1.3.2from May, which does not contain the file —@v1.3.2fails to resolve.v1.4.0is the first tag that includes it, so the reference can finally be a version.Verified
release-publish-oci.ymlatv1.4.0is blobf889fcf, the same contentmaincarried when this was prepared, andv1.4.0is one commit ahead of that point with nothing behind it. No behaviour change, just a fixed reference.