From fb448f9f0c58b5a36f7d24f3d6defc4641a5bb75 Mon Sep 17 00:00:00 2001 From: Mikkel Albrechtsem Date: Mon, 20 Jul 2026 10:26:49 +0200 Subject: [PATCH 1/2] fix(release): pin semantic release dependency versions, fixes #27 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c2fd9c3..35627db 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -91,7 +91,7 @@ jobs: with: node-version: "lts/*" - name: Install dependencies - run: npm install semantic-release @semantic-release/exec @semantic-release/commit-analyzer @semantic-release/git @semantic-release/github @semantic-release/release-notes-generator conventional-changelog-conventionalcommits ${{ inputs.plugins }} -D + run: npm install semantic-release@v25.0.0 @semantic-release/exec@v7.1.0 @semantic-release/commit-analyzer@v13.0.1 @semantic-release/git@v10.0.1 @semantic-release/github@v12.0.9 @semantic-release/release-notes-generator@v14.1.1 conventional-changelog-conventionalcommits@v9.3.1 ${{ inputs.plugins }} -D - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies run: npm audit signatures - name: Detect if configuration file is available for semantic-release From cc89c53df91814dc90a9c3b5dae5071cd53d6158 Mon Sep 17 00:00:00 2001 From: Mikkel Albrechtsem Date: Mon, 20 Jul 2026 10:26:57 +0200 Subject: [PATCH 2/2] fix(release): update action versions in release workflow --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 35627db..dc23615 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -53,7 +53,7 @@ jobs: version: ${{ steps.version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7.0.0 with: fetch-depth: 0 persist-credentials: false @@ -87,7 +87,7 @@ jobs: enable-cache: true - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7.0.0 with: node-version: "lts/*" - name: Install dependencies @@ -160,7 +160,7 @@ jobs: status=${PIPESTATUS[0]} exit $status - name: Archive release log - uses: actions/upload-artifact@v5 + uses: actions/upload-artifact@v7.0.1 with: name: semantic-release.log path: semantic-release.log