From 40acdf8d9b903e0be2994bbecde2acf3c63e8f2a Mon Sep 17 00:00:00 2001 From: Rune Soerensen Date: Sat, 16 May 2026 03:06:50 -0400 Subject: [PATCH] Pin Beta Release tag to build commit MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The `Create Beta Release` step in `build.yml` doesn't set `target_commitish`, so `softprops/action-gh-release` defaults the tag to `main`. Because `release-merge.yml` runs in parallel and pushes the release branch into `main`, by the time the Beta Release step runs, `main` may include commits that aren't in the binary — causing the published artifacts and the source at the tag to silently disagree (as happened in v0.40.5; see #2603). Set `target_commitish: ${{ github.sha }}` to pin the tag to the release-branch commit the binaries were built from. Mirrors what the `Create Pre-Release` step already does. Fixes #2603 Signed-off-by: Rune Soerensen --- .github/workflows/build.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 2e8d7685d..ea6bcf6bf 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -373,6 +373,7 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: + target_commitish: ${{ github.sha }} tag_name: v${{ env.PACK_VERSION }} name: pack v${{ env.PACK_VERSION }} draft: true