Replace softprops/action-gh-release with gh CLI - #1092
Merged
Conversation
softprops/action-gh-release is not on the repository's allowed-actions list, causing release.yml to fail with startup_failure on every push to main and release/*.x. The pre-installed gh CLI on windows runners produces an equivalent GitHub Release without requiring a third-party action.
dwcullop
enabled auto-merge (squash)
May 26, 2026 05:17
Member
|
You may want to have a look at https://github.com/reactiveui/actions-common or https://github.com/glennawatson/nustreamdocs for how I generate release notes btw. I moved away from what is happening in this repo to a newer tool |
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates the release workflow to avoid using a third-party action that is blocked by the repository’s allowed-actions policy, restoring the ability to publish releases from main and release/*.x.
Changes:
- Replaces
softprops/action-gh-release@v2.6.2withgh release create(GitHub CLI) in.github/workflows/release.yml. - Wires tag/title/prerelease/notes inputs into the CLI invocation via workflow step env vars.
Large changelogs can exceed the Windows command-line buffer when passed as --notes. Writing to a file and using --notes-file removes the size constraint.
glennawatson
approved these changes
May 26, 2026
JakenVeina
approved these changes
May 26, 2026
|
This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
release.ymlfails withstartup_failureon every push tomainandrelease/*.xbecausesoftprops/action-gh-release@v2.6.2is not on this repository's allowed-actions list.Repro: https://github.com/reactivemarbles/DynamicData/actions/runs/26430799048
Fix
Replace the action with
gh release createfrom the GitHub CLI (pre-installed on the windows runner). Same inputs (tag, title, notes, prerelease flag), no third-party dependency, no policy change required.