From 456ed7033e9736b5ff7a0e6fcb4697789d7e393d Mon Sep 17 00:00:00 2001 From: Markus Waldheim Date: Mon, 6 Jul 2026 10:47:42 +0200 Subject: [PATCH] fix(ci): extract semrel release tarball into a dedicated subdir The semrel release tarball's leading './' entry has mode 0700. Extracting directly into /tmp made tar try to chmod/utime /tmp itself, which fails in the GitHub Actions runner container ('Cannot utime: Operation not permitted' / 'Cannot change mode to rwx-----T'), breaking the Semrel Release workflow on every push to main. Fix: extract into a fresh /tmp/semrel-dl subdir (owned by the runner) and move the binary out, instead of extracting straight into /tmp. --- .github/workflows/semrel-release.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/semrel-release.yaml b/.github/workflows/semrel-release.yaml index ee3b5be..1254234 100644 --- a/.github/workflows/semrel-release.yaml +++ b/.github/workflows/semrel-release.yaml @@ -48,7 +48,9 @@ jobs: VERSION=$(gh release view --repo SemRels/semrel --json tagName -q .tagName) gh release download "$VERSION" --repo SemRels/semrel \ --pattern "semrel_*_linux_amd64.tar.gz" --dir /tmp - tar -xzf /tmp/semrel_*_linux_amd64.tar.gz -C /tmp + mkdir -p /tmp/semrel-dl + tar -xzf /tmp/semrel_*_linux_amd64.tar.gz -C /tmp/semrel-dl + mv /tmp/semrel-dl/semrel /tmp/semrel chmod +x /tmp/semrel echo "semrel $(/tmp/semrel --version 2>/dev/null || /tmp/semrel version 2>/dev/null || echo installed)"