From ff7be7c18d42ddccb4039dcb17af4f8fe4431869 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?K=C5=8Dan?= Date: Sat, 7 Mar 2026 10:39:51 -0700 Subject: [PATCH] ci: pin cpm to release 0.998003 instead of master Replace the fragile `curl | perl -` pattern that piped an unpinned script from the cpm master branch directly into the interpreter. The new approach: - Downloads from a pinned tag (0.998003) instead of master - Saves to a file before execution (no direct pipe to interpreter) - Uses curl -f to fail on HTTP errors instead of silently passing error pages to perl Applied to both macos.yml and windows.yml workflows. Linux CI is unaffected (uses cpm from the Docker image). Co-Authored-By: Claude Opus 4.6 --- .github/workflows/macos.yml | 2 +- .github/workflows/windows.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml index 358a1b7d3..0828c7a23 100644 --- a/.github/workflows/macos.yml +++ b/.github/workflows/macos.yml @@ -27,7 +27,7 @@ jobs: - name: perl -V run: perl -V - name: Install Dependencies - run: curl -sL https://raw.githubusercontent.com/skaji/cpm/master/cpm | perl - install -g --show-build-log-on-failure + run: curl -fsSL -o cpm https://raw.githubusercontent.com/skaji/cpm/0.998003/cpm && perl cpm install -g --show-build-log-on-failure - name: perl Makefile.PL run: perl Makefile.PL - name: make diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index b1c259d07..251aa9d30 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -28,7 +28,7 @@ jobs: - name: perl -V run: perl -V - name: Install Dependencies - run: curl -sL https://raw.githubusercontent.com/skaji/cpm/master/cpm | perl - install -g --show-build-log-on-failure + run: curl -fsSL -o cpm https://raw.githubusercontent.com/skaji/cpm/0.998003/cpm && perl cpm install -g --show-build-log-on-failure - name: perl -V run: perl -V - name: perl Makefile.PL