Skip to content

fix(release): pin semantic-release Node - #72

Merged
zoeyrose merged 2 commits into
mainfrom
chore/release-toolchain-pin
Aug 8, 2026
Merged

fix(release): pin semantic-release Node#72
zoeyrose merged 2 commits into
mainfrom
chore/release-toolchain-pin

Conversation

@zoeyrose

@zoeyrose zoeyrose commented Aug 8, 2026

Copy link
Copy Markdown
Member

Select Node 24 through immutable setup-node v7 before invoking the exact semantic-release packages. This removes the hosted runner ambient-toolchain dependency found by the organization supply-chain audit.\n\nValidation: actionlint .github/workflows/*.yml; git diff --check.

@zoeyrose
zoeyrose merged commit 2e12a8b into main Aug 8, 2026
6 checks passed
@zoeyrose
zoeyrose deleted the chore/release-toolchain-pin branch August 8, 2026 16:32
@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 1.0.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant