fix(release): compile the SLSA generator from source - #55
Merged
Conversation
Same 127 dish-linux hit on its first tag: a SHA-pinned generator call cannot resolve the prebuilt builder release. (cherry picked from commit c46a2ab)
emir-hasanbegovic
enabled auto-merge (squash)
August 23, 2026 15:52
Merged
emir-hasanbegovic
added a commit
that referenced
this pull request
Aug 24, 2026
Version bump for the pending work on main: - **Added**: configurable keep-awake (Power settings) - **Fixed**: zero-width overflow menus, cross-transport twin dedup, pinned Configure-binding action bar - **Changed**: app-mark iconography; release pipeline moved to the shared harden workflow with advisory Authenticode signing (#54) and a from-source SLSA generator (#55) CHANGELOG heading dated, and all three version mirrors (`CMakeLists.txt`, `packaging/dish.rc`, `vcpkg.json`) move together so `version-consistency.yml` and the tag-build asserts pass. Tagging `1.1.0` after merge publishes it. No changes to the stable asset names (`dish-setup.exe`, `dish-windows.zip`, `latest.json`) — this repo is already the model the other product repos just adopted.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
dish-linux's first tag surfaced this in the shared provenance shape: a SHA-pinned call to the generic generator cannot resolve which prebuilt builder release to download, so the binary never arrives and the generator dies at exit 127.
compile-generator: truebuilds it from source, the way satellite's shipped 1.0.0 already did. Same one-line fix as dish-linux #41.