From 2896875331a5473bd715a4cbec6ee838edfc3010 Mon Sep 17 00:00:00 2001 From: jordanthejet Date: Sat, 7 Mar 2026 18:12:57 -0500 Subject: [PATCH] fix(ci): pin release tag to triggering commit via --target GITHUB_SHA Without --target, gh release create tags the latest commit on the default branch, which may differ from the commit that built the artifacts. Pin to $GITHUB_SHA so the tag always matches the built ref. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/promote-release.yml | 1 + .github/workflows/release.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/promote-release.yml b/.github/workflows/promote-release.yml index 04bd14ad1..3d75df3d7 100644 --- a/.github/workflows/promote-release.yml +++ b/.github/workflows/promote-release.yml @@ -158,6 +158,7 @@ jobs: run: | gh release create "${{ needs.validate.outputs.tag }}" \ --repo "${{ github.repository }}" \ + --target "$GITHUB_SHA" \ --title "${{ needs.validate.outputs.tag }}" \ --latest \ --generate-notes \ diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2d8fa8d0d..023930032 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -142,6 +142,7 @@ jobs: run: | gh release create "${{ needs.version.outputs.tag }}" \ --repo "${{ github.repository }}" \ + --target "$GITHUB_SHA" \ --title "${{ needs.version.outputs.tag }}" \ --prerelease \ --generate-notes \