Skip to content

CI: Replace softprops/action-gh-release with gh release create - #7745

Merged
echoix merged 4 commits into
OSGeo:mainfrom
echoix:replace-softprop-action-gh-release-gh-cli
Jul 17, 2026
Merged

echoix merged 4 commits into
OSGeo:mainfrom
echoix:replace-softprop-action-gh-release-gh-cli

Conversation

@echoix

@echoix echoix commented Jul 17, 2026 •

Copy link
Copy Markdown
Member

gh cli is already on the runner. This also solves an issue surfaced by a new version of zizmor, noting that using actions like these when another tool already doing the same functionality is increasing the attack surface uselessly.

This PR needs to be merged in order to unblock #7253, which is also blocking the use of the new feature to run steps in parallel, notably reducing time for installing dependencies in CI for Windows.

The modified section were tested by pushing tags to my fork.
Prerelease tag run: https://github.com/echoix/grass/actions/runs/29572648471/job/87859794873

Screenshots prerelease

image image image

Normal release run: https://github.com/echoix/grass/actions/runs/29574356975/job/87865317270

Screenshots release

image image image

gh cli is already on the runner. This also solves an issue surfaced by a new version of zizmor, noting that using actions like these when another tool already doing the same functionality is increasing the attack surface uselessly.
@echoix
echoix requested a review from wenzeslaus July 17, 2026 10:41
@echoix
echoix changed the base branch from main to renovate/main-zizmorcore-zizmor-pre-commit-1.x July 17, 2026 12:11
@echoix
echoix changed the base branch from renovate/main-zizmorcore-zizmor-pre-commit-1.x to main July 17, 2026 12:13
@github-actions github-actions Bot added the CI Continuous integration label Jul 17, 2026
@echoix
echoix enabled auto-merge (squash) July 17, 2026 16:56

@wenzeslaus wenzeslaus left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like a equivalent solution, but using only GitHub tooling, so simpler. (If I recall correctly, it did not work at the time when I added the workflow for one reason or another, so that's why we were not using it.)

@echoix
echoix merged commit 4c0c6b7 into OSGeo:main Jul 17, 2026
27 checks passed
@echoix
echoix deleted the replace-softprop-action-gh-release-gh-cli branch July 17, 2026 20:30
@github-actions github-actions Bot added this to the 8.6.0 milestone Jul 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI Continuous integration

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants