From 46c97e782bb9753c0978f6d42758a7abd57e4373 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lu=C3=ADs=20Ventuzelos?= <207163323+cx-luis-ventuzelos@users.noreply.github.com> Date: Tue, 16 Jun 2026 09:44:58 +0100 Subject: [PATCH] replace dev-drprasad/delete-older-releases with gh CLI Action is not in the step-security allowed list; replace with equivalent gh release delete --cleanup-tag commands --- .../workflows/delete-packages-and-releases.yml | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/.github/workflows/delete-packages-and-releases.yml b/.github/workflows/delete-packages-and-releases.yml index f4f5e3e..22f9d3c 100644 --- a/.github/workflows/delete-packages-and-releases.yml +++ b/.github/workflows/delete-packages-and-releases.yml @@ -43,10 +43,13 @@ jobs: - name: Delete releases and tags continue-on-error: true - uses: dev-drprasad/delete-older-releases@dfbe6be2a006e9475dfcbe5b8d201f1824c2a9fe #v0.3.4 env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - with: - keep_latest: 0 - delete_tag_pattern: "-${{ inputs.tag }}.0" - delete_tags: true + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + INPUT_TAG: ${{ inputs.tag }} + run: | + gh release list --limit 100 --json tagName \ + --jq ".[] | select(.tagName | contains(\"-${INPUT_TAG}.0\")) | .tagName" \ + | while IFS= read -r tag; do + echo "Deleting release and tag: $tag" + gh release delete "$tag" --yes --cleanup-tag || true + done