ci: pin softprops/action-gh-release to v2.6.2 (dodge v3.0.0 regression)#2385
Merged
ci: pin softprops/action-gh-release to v2.6.2 (dodge v3.0.0 regression)#2385
Conversation
Three workflow lines were tracking the floating major tag @V3, which auto-upgraded to softprops/action-gh-release@v3.0.0 the moment it shipped on 2026-04-12. v3.0.0 introduced a deterministic regression where `.zip.sha512` asset uploads fail with: ##[error]The "chunk" argument must be of type string or an instance of Buffer, TypedArray, or DataView. Received an instance of ArrayBuffer The error fires inside the action's stream-write call, not the network layer, so the Wandalen/wretry.action@v3 wrap added in #2380 runs all 3 attempts with the identical failure and exits 1. First seen on SNAPSHOT+1656; same error on +1657. No upstream issue exists yet at softprops/action-gh-release; we are early adopters of v3.0.0. Pin to v2.6.2 in three locations: - release.yml: Create GitHub Release (stable, main) - release.yml: Create Snapshot Pre-Release (develop) - release-candidate.yml: Create GitHub Prerelease v2.6.2 was cut the same day as v3.0.0 and is the last known-good release for this repo's upload pattern. The `overwrite_files: true` flag we depend on for retry idempotency exists in v2.x as well, so no other changes are required. Re-pin to @V3 once upstream ships a v3.0.1 with the chunk-type fix. The expanded comment in release.yml captures the rationale so a future maintainer doesn't quietly bump the major version back without checking that v3.x is healthy first. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Pin
softprops/action-gh-releasefrom the floating@v3tag to@v2.6.2in three workflow steps. v3.0.0 (released 2026-04-12) introduced a deterministic regression that breaks every snapshot publish on develop.The bug
After PR #2381 merged to develop,
Wheels Snapshotsrun #1657 failed atCreate Snapshot Pre-Releasewith:The error fires three times in a row at exactly 30-second intervals, matching the
Wandalen/wretry.action@v3cadence configured in #2380 — proving the retry-wrap is working as designed but cannot help because the error is deterministic, not transient. Same error pattern visible on the previous run #1656 on commitf791d404(which was the #2380 merge itself).Root cause
softprops/action-gh-release@v3.0.0shipped on 2026-04-12. The repo pinned@v3(a floating major tag), so it auto-upgraded the moment v3.0.0 went live. The new release has a regression in how it streams asset uploads — passing anArrayBufferinto Node's stream-write API where Node 20+ requiresBuffer/TypedArray/DataView/string. Affects at minimum.zip.sha512files.v2.6.2was cut the same day asv3.0.0and is the last known-good release for this repo's upload pattern.overwrite_files: true(which #2380 relies on for retry idempotency) exists in v2.x as well.Upstream issue: softprops/action-gh-release#790
Changes
.github/workflows/release.yml:325—@v3→@v2.6.2(Create GitHub Release, main only).github/workflows/release.yml:367—@v3→@v2.6.2(Create Snapshot Pre-Release, develop only).github/workflows/release-candidate.yml:244—@v3→@v2.6.2(Create GitHub Prerelease)Create GitHub Releaseto capture the regression rationale so a future maintainer doesn't silently bump the major version back without checking that v3.x is healthy.Test plan
Lucee 7 + SQLite (LuCLI)passes (sanity).verifyandValidate Commit Messagespass.Wheels Snapshotsrun completes without theArrayBuffererror and the snapshot release attaches all 18 assets cleanly.@v3(or@v3.0.1if we want belt-and-suspenders).🤖 Generated with Claude Code