Skip to content

fix(ci): pin snap artifact downloads to valid action#1855

Merged
drew merged 1 commit into
mainfrom
noissue-snap-download-artifact-pin/anewberry
Jun 10, 2026
Merged

fix(ci): pin snap artifact downloads to valid action#1855
drew merged 1 commit into
mainfrom
noissue-snap-download-artifact-pin/anewberry

Conversation

@drew

@drew drew commented Jun 10, 2026

Copy link
Copy Markdown
Collaborator

Summary

Fix the snap package workflow by replacing the invalid actions/download-artifact SHA in the three prebuilt binary download steps with the verified v8.0.1 pin already used by the rest of the release workflows.

Related Issue

N/A

Changes

  • Updated snap CLI, gateway, and sandbox artifact download steps to use actions/download-artifact@3e5f45b.
  • Updated the inline pin comments from v8 to v8.0.1 for consistency with existing workflows.

Testing

  • git diff --check passes
  • Verified the bad SHA is absent from .github/workflows
  • Verified 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c resolves as the actions/download-artifact v8.0.1 tag target
  • mise run pre-commit passes; failed locally because python:proto started before grpc_tools was available and rust check/lint could not build z3-sys without local z3.h headers

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)

Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew drew requested review from a team, derekwaynecarr and mrunalp as code owners June 10, 2026 16:48
@drew drew merged commit d8e0ef5 into main Jun 10, 2026
28 checks passed
@drew drew deleted the noissue-snap-download-artifact-pin/anewberry branch June 10, 2026 19:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants