From 695ab039207a1e9ad45f90b1db155659a9ca97c1 Mon Sep 17 00:00:00 2001
From: Jon Langevin <codingsloth@pm.me>
Date: Sun, 24 May 2026 03:52:14 -0400
Subject: [PATCH] ci: fix Layer 3b verify-capabilities wiring + bump
 setup-wfctl to v0.63.2 (workflow#765)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Layer 3b extension's verify-capabilities step references ${{ runner.temp }}/wfctl-bin/wfctl but no curl-install step exists in this repo (uses setup-wfctl@v1 PATH install pattern instead). Fix by (a) bumping setup-wfctl pin → v0.63.2 (carries actual subcommand per #769) and (b) switching verify-capabilities invocation to PATH wfctl.
---
 .github/workflows/release.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 76e0764..058c3ff 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
           go-version-file: go.mod
       - uses: GoCodeAlone/setup-wfctl@v1
         with:
-          version: v0.61.0
+          version: v0.63.2
       - name: Validate plugin contract for publish (pre-build)
         run: wfctl plugin validate-contract --for-publish --tag "${{ github.ref_name }}" .
       - uses: goreleaser/goreleaser-action@v7
@@ -42,7 +42,7 @@ jobs:
             jq '.[] | {name, type, goos, goarch, path}' dist/artifacts.json
             exit 0
           fi
-          "${{ runner.temp }}/wfctl-bin/wfctl" plugin verify-capabilities --binary "$BIN" .
+          wfctl plugin verify-capabilities --binary "$BIN" .
       - name: Verify shipped plugin.json carries tag (post-build)
         run: |
           if [ -f .release/plugin.json ]; then