Improve release workflow reliability and remove push-protected dependency#1222
Merged
Improve release workflow reliability and remove push-protected dependency#1222
Conversation
Do not rely anymore en CasperWA/push-protected Rely now to GitHub rulesets with bypass for OTA-Release-Bot instead of classic branch protection
This allows the workflow to be tested against a non-main branch by replacing main with the name of the branch that contains the release code under test.
Ndpnt
force-pushed
the
refactor-release
branch
2 times, most recently
from
3bcb7e7 to
c731ab2
Compare
MattiSG
reviewed
Jan 13, 2026
|
|
||
| - name: Create GitHub release | ||
| uses: softprops/action-gh-release@v1 | ||
| uses: softprops/action-gh-release@v2 |
Member
There was a problem hiding this comment.
For security, as long as GitHub does not provide immutable releases, using the full SHA is the only way to prevent supply chain attacks.
MattiSG
reviewed
Jan 13, 2026
| run: | | ||
| git commit -m "Clean changelog" CHANGELOG.md | ||
| git push origin | ||
| git push origin main |
Member
There was a problem hiding this comment.
👍 very good hardening to not rely on branch name matching!
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
CasperWA/push-protected@v2dependency, use GitHub Rulesets with bypass configuration instead