From 27c116459e8ceeda8447a91a37e9ca9d1aea8a2f Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Fri, 9 Jan 2026 18:05:05 +0000 Subject: [PATCH 01/17] ci(release): Switch from action-prepare-release to Craft This PR migrates from the deprecated action-prepare-release to the new Craft GitHub Actions (reusable workflow or composite action). Changes: - Migrate .github/workflows/release.yml to Craft reusable workflow - Update .craft.yml with versioning.policy: calver --- .craft.yml | 28 ++++++++-------- .github/workflows/changelog-preview.yml | 13 ++++++++ .github/workflows/release.yml | 43 +++++-------------------- 3 files changed, 36 insertions(+), 48 deletions(-) create mode 100644 .github/workflows/changelog-preview.yml diff --git a/.craft.yml b/.craft.yml index 66238a31..97608f7d 100644 --- a/.craft.yml +++ b/.craft.yml @@ -7,18 +7,20 @@ statusProvider: name: github config: contexts: - - 'build-multiplatform-image-ghcr-amd64' - - 'build-multiplatform-image-ghcr-arm64' - - 'Create multi-platform manifest' + - 'build-multiplatform-image-ghcr-amd64' + - 'build-multiplatform-image-ghcr-arm64' + - 'Create multi-platform manifest' targets: - - name: github - - id: release - name: docker - source: ghcr.io/getsentry/uptime-checker - target: getsentry/uptime-checker - - id: latest - name: docker - source: ghcr.io/getsentry/uptime-checker - target: getsentry/uptime-checker - targetFormat: '{{{target}}}:latest' +- name: github +- id: release + name: docker + source: ghcr.io/getsentry/uptime-checker + target: getsentry/uptime-checker +- id: latest + name: docker + source: ghcr.io/getsentry/uptime-checker + target: getsentry/uptime-checker + targetFormat: '{{{target}}}:latest' +versioning: + policy: calver diff --git a/.github/workflows/changelog-preview.yml b/.github/workflows/changelog-preview.yml new file mode 100644 index 00000000..1ed10213 --- /dev/null +++ b/.github/workflows/changelog-preview.yml @@ -0,0 +1,13 @@ +name: Changelog Preview +on: + pull_request: + types: + - opened + - synchronize + - reopened + - edited + - labeled +jobs: + changelog-preview: + uses: getsentry/craft/.github/workflows/changelog-preview.yml@v2 + secrets: inherit diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c768143d..ca4a68f6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,46 +1,19 @@ name: Release - on: workflow_dispatch: inputs: version: - description: Version to release (optional) + description: Version to release (or "auto") required: false force: - description: Force a release even when there are release-blockers (optional) + description: Force a release even when there are release-blockers required: false - schedule: - # We want the release to be at 9-10am Pacific Time - # We also want it to be 1 hour before the self-hosted release - - cron: "0 17 15 * *" - -permissions: - contents: write # required to create a release - + - cron: "0 17 15 * *" jobs: release: - runs-on: ubuntu-latest - name: Release a new ${{ github.repository }} version - - steps: - - name: Get auth token - id: token - uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0 - with: - app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} - private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }} - - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - with: - token: ${{ steps.token.outputs.token }} - fetch-depth: 0 - - - name: Prepare release - uses: getsentry/action-prepare-release@3cea80dc3938c0baf5ec4ce752ecb311f8780cdc # v1 - env: - GITHUB_TOKEN: ${{ steps.token.outputs.token }} - with: - version: ${{ github.event.inputs.version }} - force: ${{ github.event.inputs.force }} - calver: true + uses: getsentry/craft/.github/workflows/release.yml@v2 + with: + version: ${{ inputs.version }} + force: ${{ inputs.force }} + secrets: inherit From ae3a8305ed4b645f09d86d45c703aca98feeb4dc Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Fri, 9 Jan 2026 23:19:44 +0000 Subject: [PATCH 02/17] ci(release): Restore GitHub App token authentication The previous migration incorrectly removed the GitHub App token authentication step. This commit restores it by switching to the composite action pattern which preserves the auth flow. --- .github/workflows/release.yml | 25 ++++++++++++++++++++----- 1 file changed, 20 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ca4a68f6..634b0876 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,8 +12,23 @@ on: - cron: "0 17 15 * *" jobs: release: - uses: getsentry/craft/.github/workflows/release.yml@v2 - with: - version: ${{ inputs.version }} - force: ${{ inputs.force }} - secrets: inherit + runs-on: ubuntu-latest + name: Release a new version + steps: + - name: Get auth token + id: token + uses: actions/create-github-app-token@v1 + with: + app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} + private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }} + - uses: actions/checkout@v4 + with: + token: ${{ steps.token.outputs.token }} + fetch-depth: 0 + - name: Prepare release + uses: getsentry/craft@v2 + env: + GITHUB_TOKEN: ${{ steps.token.outputs.token }} + with: + version: ${{ inputs.version }} + force: ${{ inputs.force }} From 374d1e9a764e1f0737ac0f4fde83be3c261636de Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Sat, 10 Jan 2026 00:29:04 +0000 Subject: [PATCH 03/17] fix: Pin actions to SHA and add permissions blocks --- .github/workflows/changelog-preview.yml | 4 ++++ .github/workflows/release.yml | 10 +++++++--- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/.github/workflows/changelog-preview.yml b/.github/workflows/changelog-preview.yml index 1ed10213..5883c004 100644 --- a/.github/workflows/changelog-preview.yml +++ b/.github/workflows/changelog-preview.yml @@ -7,6 +7,10 @@ on: - reopened - edited - labeled +permissions: + contents: write + pull-requests: write + jobs: changelog-preview: uses: getsentry/craft/.github/workflows/changelog-preview.yml@v2 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 634b0876..a7f8a593 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,6 +10,10 @@ on: required: false schedule: - cron: "0 17 15 * *" +permissions: + contents: write + pull-requests: write + jobs: release: runs-on: ubuntu-latest @@ -17,16 +21,16 @@ jobs: steps: - name: Get auth token id: token - uses: actions/create-github-app-token@v1 + uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v2 with: app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }} - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v2 with: token: ${{ steps.token.outputs.token }} fetch-depth: 0 - name: Prepare release - uses: getsentry/craft@v2 + uses: getsentry/craft@39ee616a6a58dc64797feecb145d66770492b66c # v2 env: GITHUB_TOKEN: ${{ steps.token.outputs.token }} with: From b3439eee35065b82367962e1b6daecb643a4382f Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Sat, 10 Jan 2026 01:35:00 +0000 Subject: [PATCH 04/17] fix: Use correct action version SHAs (restore original versions) --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a7f8a593..e0b02589 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -25,7 +25,7 @@ jobs: with: app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }} - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v2 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 # v2 with: token: ${{ steps.token.outputs.token }} fetch-depth: 0 From 2013c59ad91d1190792310789e223aff8c9e37fd Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Sat, 10 Jan 2026 02:04:01 +0000 Subject: [PATCH 05/17] fix: Use correct action version SHAs (restore original versions) --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e0b02589..16b2b179 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -25,7 +25,7 @@ jobs: with: app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }} - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 # v2 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 # v3 # v2 with: token: ${{ steps.token.outputs.token }} fetch-depth: 0 From d55003296bf5a3de7b993315b46543b25c65dd8a Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Mon, 12 Jan 2026 12:27:57 +0000 Subject: [PATCH 06/17] fix: Clean up action version comments --- .github/workflows/fast-revert.yml | 2 +- .github/workflows/image.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/test.yml | 2 +- .github/workflows/validate-pipelines.yml | 4 ++-- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/fast-revert.yml b/.github/workflows/fast-revert.yml index b5f0f545..d0b45753 100644 --- a/.github/workflows/fast-revert.yml +++ b/.github/workflows/fast-revert.yml @@ -23,7 +23,7 @@ jobs: app_id: ${{ vars.FAST_REVERT_BOT_APP_ID }} private_key: ${{ secrets.GH_FAST_REVERT_PRIVATE_KEY }} - - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3.1.0 with: token: ${{ steps.token.outputs.token }} - uses: getsentry/action-fast-revert@35b4b6c1f8f91b5911159568b3b15e531b5b8174 # v2.0.1 diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml index d1c951d0..7d0499d7 100644 --- a/.github/workflows/image.yml +++ b/.github/workflows/image.yml @@ -28,7 +28,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 - name: Build image uses: getsentry/action-build-and-push-images@b172ab61a5f7eabd58bd42ce231b517e79947c01 diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 86039726..110d7a02 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -30,7 +30,7 @@ jobs: app_id: ${{ vars.SENTRY_INTERNAL_APP_ID }} private_key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.1.1 - name: Get changed files id: changes diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 16b2b179..c3b47f53 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -21,11 +21,11 @@ jobs: steps: - name: Get auth token id: token - uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v2 + uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2 with: app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }} - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 # v3 # v2 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 with: token: ${{ steps.token.outputs.token }} fetch-depth: 0 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 5b262566..3dd928fb 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -12,7 +12,7 @@ jobs: timeout-minutes: 5 runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.1.1 - uses: shogo82148/actions-setup-redis@428a144f11914412a8f52902296e134dd2e0f925 with: redis-version: "7.x" diff --git a/.github/workflows/validate-pipelines.yml b/.github/workflows/validate-pipelines.yml index daa60bdd..8b70fe93 100644 --- a/.github/workflows/validate-pipelines.yml +++ b/.github/workflows/validate-pipelines.yml @@ -19,7 +19,7 @@ jobs: outputs: gocd: ${{ steps.changes.outputs.gocd }} steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 - name: Check for relevant file changes uses: getsentry/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 id: changes @@ -41,7 +41,7 @@ jobs: id-token: "write" steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 - id: 'auth' uses: google-github-actions/auth@955352c3b43196640b567e4646256d2fbb4aa1c7 # v1 with: From d5ae02a3d1e6e1b3102b0f55f9cd0ea8795d39ee Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Tue, 13 Jan 2026 22:46:56 +0000 Subject: [PATCH 07/17] Update Craft SHA to 1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c3b47f53..acde5fab 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,7 +30,7 @@ jobs: token: ${{ steps.token.outputs.token }} fetch-depth: 0 - name: Prepare release - uses: getsentry/craft@39ee616a6a58dc64797feecb145d66770492b66c # v2 + uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce # v2 env: GITHUB_TOKEN: ${{ steps.token.outputs.token }} with: From a4185ff20174cbe6cfaf412425ebe56bb63606f3 Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Tue, 13 Jan 2026 23:08:30 +0000 Subject: [PATCH 08/17] Add explicit permissions block to image.yml --- .github/workflows/image.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml index 7d0499d7..7cf999cc 100644 --- a/.github/workflows/image.yml +++ b/.github/workflows/image.yml @@ -7,6 +7,10 @@ on: - main - release/** +permissions: + contents: write + pull-requests: write + jobs: build-multiplatform-image-ghcr: name: build-multiplatform-image-ghcr-${{ matrix.platform }} From 84256d00f5d276ee95955555994a997cda8369c9 Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Tue, 13 Jan 2026 23:08:31 +0000 Subject: [PATCH 09/17] Add explicit permissions block to release-ghcr-version-tag.yml --- .github/workflows/release-ghcr-version-tag.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/release-ghcr-version-tag.yml b/.github/workflows/release-ghcr-version-tag.yml index fa9ea81a..20f2f895 100644 --- a/.github/workflows/release-ghcr-version-tag.yml +++ b/.github/workflows/release-ghcr-version-tag.yml @@ -4,6 +4,10 @@ on: release: types: [prereleased, released] +permissions: + contents: write + pull-requests: write + jobs: release-ghcr-version-tag: permissions: From 67b09bb8296e9e635fe27042d05b7ccd8c952ad0 Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Tue, 13 Jan 2026 23:08:33 +0000 Subject: [PATCH 10/17] Add explicit permissions block to test.yml --- .github/workflows/test.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 3dd928fb..78afee1e 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -7,6 +7,10 @@ on: branches: - main - release/** +permissions: + contents: write + pull-requests: write + jobs: test: timeout-minutes: 5 From df15defc81e135d9c6905b986ea76fa8376a9eab Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Tue, 13 Jan 2026 23:18:10 +0000 Subject: [PATCH 11/17] Revert permissions changes to image.yml --- .github/workflows/image.yml | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml index 7cf999cc..d1c951d0 100644 --- a/.github/workflows/image.yml +++ b/.github/workflows/image.yml @@ -7,10 +7,6 @@ on: - main - release/** -permissions: - contents: write - pull-requests: write - jobs: build-multiplatform-image-ghcr: name: build-multiplatform-image-ghcr-${{ matrix.platform }} @@ -32,7 +28,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Build image uses: getsentry/action-build-and-push-images@b172ab61a5f7eabd58bd42ce231b517e79947c01 From 3af0032f33e9493eb49d6147d847b1bdc189f6d1 Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Tue, 13 Jan 2026 23:18:13 +0000 Subject: [PATCH 12/17] Revert permissions changes to release-ghcr-version-tag.yml --- .github/workflows/release-ghcr-version-tag.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/release-ghcr-version-tag.yml b/.github/workflows/release-ghcr-version-tag.yml index 20f2f895..fa9ea81a 100644 --- a/.github/workflows/release-ghcr-version-tag.yml +++ b/.github/workflows/release-ghcr-version-tag.yml @@ -4,10 +4,6 @@ on: release: types: [prereleased, released] -permissions: - contents: write - pull-requests: write - jobs: release-ghcr-version-tag: permissions: From 135932bd9e8bef0b5e90d0c3d8f294153f6b0e3b Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Tue, 13 Jan 2026 23:18:15 +0000 Subject: [PATCH 13/17] Revert permissions changes to test.yml --- .github/workflows/test.yml | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 78afee1e..5b262566 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -7,16 +7,12 @@ on: branches: - main - release/** -permissions: - contents: write - pull-requests: write - jobs: test: timeout-minutes: 5 runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.1.1 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - uses: shogo82148/actions-setup-redis@428a144f11914412a8f52902296e134dd2e0f925 with: redis-version: "7.x" From 5d9924909a11f658397f59118f81d41add1ce95c Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Wed, 14 Jan 2026 00:09:09 +0000 Subject: [PATCH 14/17] fix: revert extraneous changes to non-release workflow files --- .github/workflows/fast-revert.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/validate-pipelines.yml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/fast-revert.yml b/.github/workflows/fast-revert.yml index d0b45753..b5f0f545 100644 --- a/.github/workflows/fast-revert.yml +++ b/.github/workflows/fast-revert.yml @@ -23,7 +23,7 @@ jobs: app_id: ${{ vars.FAST_REVERT_BOT_APP_ID }} private_key: ${{ secrets.GH_FAST_REVERT_PRIVATE_KEY }} - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3.1.0 + - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0 with: token: ${{ steps.token.outputs.token }} - uses: getsentry/action-fast-revert@35b4b6c1f8f91b5911159568b3b15e531b5b8174 # v2.0.1 diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 110d7a02..86039726 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -30,7 +30,7 @@ jobs: app_id: ${{ vars.SENTRY_INTERNAL_APP_ID }} private_key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.1.1 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Get changed files id: changes diff --git a/.github/workflows/validate-pipelines.yml b/.github/workflows/validate-pipelines.yml index 8b70fe93..daa60bdd 100644 --- a/.github/workflows/validate-pipelines.yml +++ b/.github/workflows/validate-pipelines.yml @@ -19,7 +19,7 @@ jobs: outputs: gocd: ${{ steps.changes.outputs.gocd }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Check for relevant file changes uses: getsentry/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 id: changes @@ -41,7 +41,7 @@ jobs: id-token: "write" steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - id: 'auth' uses: google-github-actions/auth@955352c3b43196640b567e4646256d2fbb4aa1c7 # v1 with: From e848f5d6034f72aaecce839ecf4746af0386c94e Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Wed, 14 Jan 2026 11:16:04 +0000 Subject: [PATCH 15/17] fix: clean up release.yml formatting and version comments --- .github/workflows/release.yml | 52 ++++++++++++++++++++--------------- 1 file changed, 30 insertions(+), 22 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index acde5fab..41d3c8ef 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,4 +1,5 @@ name: Release + on: workflow_dispatch: inputs: @@ -6,33 +7,40 @@ on: description: Version to release (or "auto") required: false force: - description: Force a release even when there are release-blockers + description: Force a release even when there are release-blockers (optional) required: false + schedule: - - cron: "0 17 15 * *" + # We want the release to be at 9-10am Pacific Time + # We also want it to be 1 hour before the self-hosted release + - cron: "0 17 15 * *" + permissions: - contents: write - pull-requests: write + contents: write # required to create a release jobs: release: runs-on: ubuntu-latest - name: Release a new version + name: Release a new ${{ github.repository }} version + steps: - - name: Get auth token - id: token - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2 - with: - app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} - private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }} - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3 - with: - token: ${{ steps.token.outputs.token }} - fetch-depth: 0 - - name: Prepare release - uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce # v2 - env: - GITHUB_TOKEN: ${{ steps.token.outputs.token }} - with: - version: ${{ inputs.version }} - force: ${{ inputs.force }} + - name: Get auth token + id: token + uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0 + with: + app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} + private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }} + + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + with: + token: ${{ steps.token.outputs.token }} + fetch-depth: 0 + + - name: Prepare release + uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce # v2 + env: + GITHUB_TOKEN: ${{ steps.token.outputs.token }} + with: + version: ${{ github.event.inputs.version }} + force: ${{ github.event.inputs.force }} + calver: true From c399972aab13d3c0b1db3472e6959c283563707f Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Wed, 14 Jan 2026 13:17:46 +0000 Subject: [PATCH 16/17] build(craft): Update Craft action to c6e2f04 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 41d3c8ef..eff3c898 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -37,7 +37,7 @@ jobs: fetch-depth: 0 - name: Prepare release - uses: getsentry/craft@1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce # v2 + uses: getsentry/craft@c6e2f04939b6ee67030588afbb5af76b127d8203 # v2 env: GITHUB_TOKEN: ${{ steps.token.outputs.token }} with: From 93401a55f4baab7447beb49aa50d05312bd186d5 Mon Sep 17 00:00:00 2001 From: Burak Yigit Kaya Date: Wed, 14 Jan 2026 22:22:00 +0000 Subject: [PATCH 17/17] chore: add unlabeled trigger to changelog-preview --- .github/workflows/changelog-preview.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/changelog-preview.yml b/.github/workflows/changelog-preview.yml index 5883c004..30c6083c 100644 --- a/.github/workflows/changelog-preview.yml +++ b/.github/workflows/changelog-preview.yml @@ -7,6 +7,7 @@ on: - reopened - edited - labeled + - unlabeled permissions: contents: write pull-requests: write