diff --git a/.github/workflows/linear-release.yml b/.github/workflows/linear-release.yml index a534ab6..84904e9 100644 --- a/.github/workflows/linear-release.yml +++ b/.github/workflows/linear-release.yml @@ -30,12 +30,12 @@ jobs: # Fail-closed mirror: a Linear outage fails this workflow so post-merge # verification and the normal workflow alerting surface the interruption. # - # Official Linear action, pinned to the release commit of v0.17.2, with + # Official Linear action, pinned to the release commit of v0.18.0, with # the CLI version selected explicitly. The installer verifies the # downloaded CLI against a published SHA-256 checksum before executing it. - name: Create Linear release with the official action id: linear_release - uses: linear/linear-release-action@53ad0f863963e7f8e270fba18426bbb55ef55384 # v0.17.2 + uses: linear/linear-release-action@d4af10092984f9bc6d5efa075b242bdf01333463 # v0.18.0 with: access_key: ${{ secrets.LINEAR_ACCESS_KEY }} - cli_version: v0.17.2 + cli_version: v0.18.0 diff --git a/CHANGELOG.md b/CHANGELOG.md index aee967f..3c59a60 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -16,6 +16,11 @@ presentation rule this organization applies to text meant for people ### Fixed +- Atualizadas a Action oficial Linear Release e a CLI para v0.18.0 no workflow + local e nos dois starter workflows, com pin por SHA completo e versão da CLI + explícita. A atualização incorpora a correção upstream na execução dos comandos + Git e mantém o comportamento padrão de identificação das issues. + - Corrigida a dependência transitiva Sharp afetada por GHSA-rgj7-g3m4-5g8c com a configuração oficial `overrides` do npm, limitada ao Miniflare. O lockfile foi regenerado pelo npm, preservando os gates de segurança existentes. diff --git a/README.md b/README.md index fe00010..edda951 100644 --- a/README.md +++ b/README.md @@ -19,7 +19,7 @@ This repository hosts the **organization profile** rendered at