From 8371482dc6cae028026dcba2908b8289749ab5b6 Mon Sep 17 00:00:00 2001 From: Pascal Birchler Date: Mon, 3 Aug 2026 11:08:11 +0200 Subject: [PATCH 1/3] Use actions/checkout for RPM/DEB build configuration in deployment workflow --- .github/workflows/deployment.yml | 20 +++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml index 265dc67cf..03a99f1cc 100644 --- a/.github/workflows/deployment.yml +++ b/.github/workflows/deployment.yml @@ -272,6 +272,11 @@ jobs: repository: wp-cli/builds token: ${{ secrets.ACTIONS_BOT }} + - name: Check out bundle repository + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + path: bundle + - name: Download built Phar file uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: @@ -282,10 +287,10 @@ jobs: sudo apt-get update sudo apt-get install rpm rpmlint -y - - name: Download RPM build configuration + - name: Copy RPM build configuration run: | - wget -O wp-cli-rpm.spec https://raw.githubusercontent.com/wp-cli/wp-cli-bundle/main/utils/wp-cli-rpm.spec - wget -O wp-cli-updaterpm.sh https://raw.githubusercontent.com/wp-cli/wp-cli-bundle/main/utils/wp-cli-updaterpm.sh + cp bundle/utils/wp-cli-rpm.spec . + cp bundle/utils/wp-cli-updaterpm.sh . - name: Build RPM package run: | @@ -353,6 +358,11 @@ jobs: repository: wp-cli/builds token: ${{ secrets.ACTIONS_BOT }} + - name: Check out bundle repository + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + path: bundle + - name: Download built Phar file uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: @@ -363,9 +373,9 @@ jobs: sudo apt-get update sudo apt-get install fakeroot lintian -y - - name: Download DEB build configuration + - name: Copy DEB build configuration run: | - wget -O wp-cli-updatedeb.sh https://raw.githubusercontent.com/wp-cli/wp-cli-bundle/main/utils/wp-cli-updatedeb.sh + cp bundle/utils/wp-cli-updatedeb.sh . - name: Build DEB package run: | From ba0525a2cb256040b0fdf2ba6817b8f07ec5f4fe Mon Sep 17 00:00:00 2001 From: Pascal Birchler Date: Mon, 3 Aug 2026 11:15:49 +0200 Subject: [PATCH 2/3] Explicitly specify repo --- .github/workflows/deployment.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml index 03a99f1cc..23339bed4 100644 --- a/.github/workflows/deployment.yml +++ b/.github/workflows/deployment.yml @@ -275,6 +275,8 @@ jobs: - name: Check out bundle repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: + repository: ${{ github.repository }} + ref: ${{ github.sha }} path: bundle - name: Download built Phar file @@ -361,6 +363,8 @@ jobs: - name: Check out bundle repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: + repository: ${{ github.repository }} + ref: ${{ github.sha }} path: bundle - name: Download built Phar file From cf36380496ff8eec6c2c539161b31a3c573350f0 Mon Sep 17 00:00:00 2001 From: Pascal Birchler Date: Mon, 3 Aug 2026 11:35:12 +0200 Subject: [PATCH 3/3] do not persist credentials --- .github/workflows/deployment.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml index 23339bed4..f69e3a2b3 100644 --- a/.github/workflows/deployment.yml +++ b/.github/workflows/deployment.yml @@ -278,6 +278,7 @@ jobs: repository: ${{ github.repository }} ref: ${{ github.sha }} path: bundle + persist-credentials: false - name: Download built Phar file uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 @@ -366,6 +367,7 @@ jobs: repository: ${{ github.repository }} ref: ${{ github.sha }} path: bundle + persist-credentials: false - name: Download built Phar file uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8