Skip to content

Backport: Fix release workflow#1492

Merged
nscuro merged 1 commit intoDependencyTrack:4.14.xfrom
nscuro:backport-pr-1491
Apr 3, 2026
Merged

Backport: Fix release workflow#1492
nscuro merged 1 commit intoDependencyTrack:4.14.xfrom
nscuro:backport-pr-1491

Conversation

@nscuro
Copy link
Copy Markdown
Member

@nscuro nscuro commented Apr 3, 2026

Description

Fixes release workflow.

It turns out that creating a draft release doesn't trigger a release: created event. Instead, we need to push a tag, which then fires the push: tags event.

For this to work, the push must be performed with a non-default PAT. A BOT_RELEASE_GITHUB_TOKEN secrets has been created with minimal privileges, and scoped to this repository.

Note that tags were previously created implicitly when creating the GitHub release.

Addressed Issue

N/A

Additional Details

N/A

Checklist

It turns out that creating a draft release doesn't trigger a `release: created` event. Instead, we need to push a tag, which then fires the `push: tags` event.

For this to work, the push must be performed with a non-default PAT. A BOT_RELEASE_GITHUB_TOKEN secrets has been created with minimal privileges, and scoped to this repository.

Note that tags were previously created implicitly when creating the GitHub release.

Signed-off-by: nscuro <nscuro@protonmail.com>
@nscuro nscuro added this to the 4.14.1 milestone Apr 3, 2026
@owasp-dt-bot
Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@nscuro nscuro merged commit 88537a4 into DependencyTrack:4.14.x Apr 3, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants