From 818f75f480fe243ff3b92f39c19f0868ab02b4bc Mon Sep 17 00:00:00 2001 From: "David V. Kimball" Date: Thu, 16 Jul 2026 21:44:03 -0700 Subject: [PATCH] Update release workflow actions so attestations verify attest-build-provenance@v2 internals were being force-migrated from Node 20 to 24 by GitHub's runner deprecation, producing release attestations the Obsidian directory checker rejects even though gh attestation verify passes them. Update checkout, setup-node, pnpm/action-setup, and attest-build-provenance to current majors and build on Node 22. --- .github/workflows/release.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d33b60c..92719e2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,19 +20,19 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: # Full history with tags so the release-notes step can find the # previous tag and build a Full Changelog compare link. fetch-depth: 0 - name: Setup pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: - node-version: "20" + node-version: "22" cache: "pnpm" - name: Install dependencies @@ -52,7 +52,7 @@ jobs: run: echo "version=$(jq -r .version manifest.json)" >> "$GITHUB_OUTPUT" - name: Attest build provenance - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 with: subject-path: | main.js