Update release refs for 8.0-stable #6051
Conversation
There was a problem hiding this comment.
Pull Request Overview
Updates the release workflow to use the canonical mongodb-labs/drivers-github-tools actions and removes deprecated Silk asset configuration.
- Switches pr-check, build, and publish actions to mongodb-labs/drivers-github-tools at v3.
- Removes SILK_ASSET_GROUP env var and silk_asset_group publish input, aligning with the updated action interface.
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| - name: "Run the check action" | ||
| id: check | ||
| uses: jamis/drivers-github-tools/ruby/pr-check@ruby-3643-update-release-process | ||
| uses: mongodb-labs/drivers-github-tools/ruby/pr-check@v3 |
There was a problem hiding this comment.
For supply-chain safety, pin actions to an immutable commit SHA rather than a floating tag. Consider updating to something like uses: mongodb-labs/drivers-github-tools/ruby/pr-check@ and documenting the process to bump SHAs when upgrading.
| uses: mongodb-labs/drivers-github-tools/ruby/pr-check@v3 | |
| # Pin to a specific commit SHA for supply-chain safety. To upgrade, update the SHA below to the latest for v3: https://github.com/mongodb-labs/drivers-github-tools/commits/v3 | |
| uses: mongodb-labs/drivers-github-tools/ruby/pr-check@c0ffee1234567890abcdef1234567890abcdef12 |
Copilot uses AI. Check for mistakes.
| steps: | ||
| - name: "Run the build action" | ||
| uses: jamis/drivers-github-tools/ruby/build@ruby-3643-update-release-process | ||
| uses: mongodb-labs/drivers-github-tools/ruby/build@v3 |
There was a problem hiding this comment.
Pin this action to a specific commit SHA instead of the v3 tag to mitigate the risk of a compromised or re-tagged action. Example: uses: mongodb-labs/drivers-github-tools/ruby/build@.
| uses: mongodb-labs/drivers-github-tools/ruby/build@v3 | |
| uses: mongodb-labs/drivers-github-tools/ruby/build@a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0 |
Copilot uses AI. Check for mistakes.
| steps: | ||
| - name: "Run the publish action" | ||
| uses: jamis/drivers-github-tools/ruby/publish@ruby-3643-update-release-process | ||
| uses: mongodb-labs/drivers-github-tools/ruby/publish@v3 |
There was a problem hiding this comment.
Similarly, pin the publish action to a commit SHA (e.g., uses: mongodb-labs/drivers-github-tools/ruby/publish@) rather than a mutable major tag.
| uses: mongodb-labs/drivers-github-tools/ruby/publish@v3 | |
| uses: mongodb-labs/drivers-github-tools/ruby/publish@<commit-sha-for-v3> |
Copilot uses AI. Check for mistakes.
| product_name: ${{ env.PRODUCT_NAME }} | ||
| product_id: ${{ env.PRODUCT_ID }} | ||
| release_message: ${{ needs.check.outputs.message }} | ||
| silk_asset_group: ${{ env.SILK_ASSET_GROUP }} | ||
| ref: ${{ needs.check.outputs.ref }} |
There was a problem hiding this comment.
The silk_asset_group input and SILK_ASSET_GROUP env were removed in this PR. If internal release runbooks or docs referenced these, please update them to reflect the new v3 publish action interface.
Copilot uses AI. Check for mistakes.
1 participant
Updates the release references to point to the canonical repo.