Skip to content

chore(ci): bump packslip to v1.1.1 - #98

Merged
jdx merged 1 commit into
mainfrom
codex/bump-packslip-v1.1.1
Sep 5, 2026
Merged

chore(ci): bump packslip to v1.1.1#98
jdx merged 1 commit into
mainfrom
codex/bump-packslip-v1.1.1

Conversation

@jdx

@jdx jdx commented Sep 5, 2026

Copy link
Copy Markdown
Owner

Update the release workflow to use packslip v1.1.1 at its immutable commit SHA. This release pins the nested provenance action, so repositories enforcing full-length action SHAs can load the composite action.

Validation: git diff --check

AI-assisted — Tool: Codex; model: openai/gpt-5; version: unavailable.


Note

Low Risk
Single third-party CI action version pin in the release attach job; no application or runtime code changes.

Overview
Updates the release workflow’s packslip step from v1.0.2 to v1.1.1, pinning the action at commit a0d434ad57571c62dbd0ab5095b4eff607a71fd3.

The bump is mainly so packslip v1.1.1 can pin its nested provenance action by full SHA, which keeps release signing/attestation working when the repo requires immutable action references. Inputs (tag, artifacts, bin) are unchanged.

Reviewed by Cursor Bugbot for commit 9c68e01. Bugbot is set up for automated code reviews on this repo. Configure here.

Summary by CodeRabbit

  • Chores
    • Updated the release attachment workflow to use a newer version of the packaging action.

@coderabbitai

coderabbitai Bot commented Sep 5, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Team

Run ID: 0ec93a4d-1f0a-45e8-a8f9-56814a15f8d7

📥 Commits

Reviewing files that changed from the base of the PR and between 7072586 and 9c68e01.

📒 Files selected for processing (1)
  • .github/workflows/release.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

The release attachment workflow updates jdx/packslip from v1.0.2 to v1.1.1.

Changes

Release workflow

Layer / File(s) Summary
Update Packslip action version
.github/workflows/release.yml
The release workflow now uses jdx/packslip v1.1.1.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 9c68e

Release attachments now use Packslip v1.1.1, which supports repositories requiring fully pinned nested actions. No current merge-blocking risk is identified.

Poem

A rabbit packs releases bright
With Packslip hopping into flight
Version one point one point one
Carries artifacts, one by one
The workflow rests beneath the moon

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: updating the CI workflow dependency packslip to v1.1.1.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@greptile-apps

greptile-apps Bot commented Sep 5, 2026

Copy link
Copy Markdown

Greptile Summary

Updates the release workflow’s jdx/packslip action from v1.0.2 to v1.1.1 using an immutable commit SHA.

  • Preserves the existing tag, artifact-glob, and binary inputs.
  • Preserves the release workflow’s provenance-generation position and permissions.
  • No actionable correctness, security, or repository-rule violations were identified.

Confidence Score: 5/5

The PR appears safe to merge because it makes a narrowly scoped, immutable action-version update without altering the surrounding release contract.

No concrete failure was established; the workflow retains its full-length action pin, existing packslip inputs, required provenance permissions, and release sequencing.

Important Files Changed

Filename Overview
.github/workflows/release.yml Updates the pinned packslip action revision without changing its inputs, permissions, or release-flow ordering.

Reviews (1): Last reviewed commit: "chore(ci): bump packslip to v1.1.1" | Re-trigger Greptile

@jdx
jdx enabled auto-merge (squash) September 5, 2026 18:42
@jdx
jdx merged commit 00c5b5a into main Sep 5, 2026
15 of 18 checks passed
@jdx
jdx deleted the codex/bump-packslip-v1.1.1 branch September 5, 2026 18:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant