From 9ac9367ffd9b9b38d5d63fb6e4b59db612359f34 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 29 Jun 2026 06:16:05 +0000 Subject: [PATCH] ci(deps): bump softprops/action-gh-release Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3efcac8951299998593f871640ea8059d6818655 to 132dbbba49e22bd4837f09b46d32a8edaf6baa58. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/3efcac8951299998593f871640ea8059d6818655...132dbbba49e22bd4837f09b46d32a8edaf6baa58) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: 132dbbba49e22bd4837f09b46d32a8edaf6baa58 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fce07f8..e71a989 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,4 +1,4 @@ -name: Release +name: Release # Best practice 2026: Trigger on GitHub Release "published" event. # This is more secure than pushing tags directly because: @@ -112,7 +112,7 @@ jobs: - name: Create GitHub Release and attach binaries # SECURITY: Pinned to full commit SHA - uses: softprops/action-gh-release@3efcac8951299998593f871640ea8059d6818655 + uses: softprops/action-gh-release@132dbbba49e22bd4837f09b46d32a8edaf6baa58 with: # When triggered by release event, use the release that was just published. # For manual dispatch, you can pass the tag via inputs. @@ -131,7 +131,7 @@ jobs: # Optional: Attach attestations as release assets if desired - name: Upload attestations (if generated) if: always() - uses: softprops/action-gh-release@3efcac8951299998593f871640ea8059d6818655 + uses: softprops/action-gh-release@132dbbba49e22bd4837f09b46d32a8edaf6baa58 with: tag_name: ${{ github.event.release.tag_name || github.event.inputs.tag }} files: |