Fix release drafter - #561
Merged
Merged
Conversation
sdwilsh
pushed a commit
to sdwilsh/ansible-playbooks
that referenced
this pull request
Jul 16, 2026
##### [\`v0.16.0\`](https://github.com/openpubkey/opkssh/releases/tag/v0.16.0) ##### A Note on Compatibility for GQ signatures Includes security fix to GitLab-CI GQ commitment PK Tokens by updating to OpenPubkey v0.25.0. As OPKSSH does not currently support GitLab-CI, and only currently supports GitLab user OP, there should be no security impact to OPKSSH. However this does introduce a breaking change to how GQ signatures are verified. If GitHub is being used with GQ signatures then signatures created prior to this release will not verify on OPKSSH after this change and signatures created after this release will not verify against on OPKSSH before this change. See [openpubkey/openpubkey#379](openpubkey/openpubkey#379) ##### Changes - Update to OpenPubkey v0.25.0 [@EthanHeilman](https://github.com/EthanHeilman) ([#569](openpubkey/opkssh#569)) - fix(deps): Update Docker @[renovate\[bot\]](https://github.com/apps/renovate) ([#566](openpubkey/opkssh#566)) - fix(deps): Update go toolchain directive to v1.26.5 @[renovate\[bot\]](https://github.com/apps/renovate) ([#567](openpubkey/opkssh#567)) - fix(deps): Update actions/cache action to v6.1.0 @[renovate\[bot\]](https://github.com/apps/renovate) ([#556](openpubkey/opkssh#556)) - feat(enforcer): add glob support to github-actions [@gastmaier](https://github.com/gastmaier) ([#558](openpubkey/opkssh#558)) - chore(deps): bump github.com/go-chi/chi/v5 from 5.2.2 to 5.2.4 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#540](openpubkey/opkssh#540)) - Imports slices rather exp/slices [@EthanHeilman](https://github.com/EthanHeilman) ([#565](openpubkey/opkssh#565)) - feat: produce Android binaries on CI [@bltavares](https://github.com/bltavares) ([#550](openpubkey/opkssh#550)) - fix(deps): Update Docker @[renovate\[bot\]](https://github.com/apps/renovate) ([#555](openpubkey/opkssh#555)) - fix(deps): Update docker/build-push-action action to v7.3.0 @[renovate\[bot\]](https://github.com/apps/renovate) ([#560](openpubkey/opkssh#560)) - fix(deps): Update goreleaser/goreleaser-action action to v7.2.3 @[renovate\[bot\]](https://github.com/apps/renovate) ([#557](openpubkey/opkssh#557)) - fix(deps): Update release-drafter/release-drafter action to v7.5.1 @[renovate\[bot\]](https://github.com/apps/renovate) ([#554](openpubkey/opkssh#554)) - fix(deps): Update release-drafter/release-drafter action to v7 @[renovate\[bot\]](https://github.com/apps/renovate) ([#551](openpubkey/opkssh#551)) - chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#539](openpubkey/opkssh#539)) ##### ð Bug Fixes - Fix release drafter [@EthanHeilman](https://github.com/EthanHeilman) ([#561](openpubkey/opkssh#561)) - fix(deps): Update actions/cache action to v6 @[renovate\[bot\]](https://github.com/apps/renovate) ([#543](openpubkey/opkssh#543)) - fix(deps): Update actions/checkout action to v7 @[renovate\[bot\]](https://github.com/apps/renovate) ([#545](openpubkey/opkssh#545)) - fix(deps): Update actions/setup-go action to v6.5.0 @[renovate\[bot\]](https://github.com/apps/renovate) ([#553](openpubkey/opkssh#553)) - fix(deps): Update dependency golangci/golangci-lint to v2.12.2 @[renovate\[bot\]](https://github.com/apps/renovate) ([#552](openpubkey/opkssh#552)) - fix(deps): Update Docker @[renovate\[bot\]](https://github.com/apps/renovate) ([#549](openpubkey/opkssh#549)) - fix(deps): Update actions/setup-go action to v6.4.0 @[renovate\[bot\]](https://github.com/apps/renovate) ([#541](openpubkey/opkssh#541)) - fix(deps): Update dependency golangci/golangci-lint to v2.11.4 @[renovate\[bot\]](https://github.com/apps/renovate) ([#489](openpubkey/opkssh#489)) - fix(deps): Update zizmorcore/zizmor-action action to v0.5.7 @[renovate\[bot\]](https://github.com/apps/renovate) ([#535](openpubkey/opkssh#535)) - fix(deps): Update Docker @[renovate\[bot\]](https://github.com/apps/renovate) ([#469](openpubkey/opkssh#469)) ##### 𧰠Maintenance - fix(deps): Update Docker @[renovate\[bot\]](https://github.com/apps/renovate) ([#469](openpubkey/opkssh#469))
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
release drafter doesn't have permissions for autolabeling PRs when running on PRs. This was causing build failures. I don't fully understand the security implications of giving this access to PR triggered jobs and even if I did, why is it worth the risk that I accidently overprivileged something? For this reason I am removing autolabeling from the release drafter.