From f15f33b2c6bf9213e2e6bae3f50324976a8eb82c Mon Sep 17 00:00:00 2001 From: Markus Waldheim Date: Mon, 6 Jul 2026 10:48:16 +0200 Subject: [PATCH] fix(ci): extract semrel release tarball into a dedicated subdir The semrel release tarball's leading './' entry has mode 0700. Extracting directly into /tmp made tar try to chmod/utime /tmp itself, which fails in the GitHub Actions runner container ('Cannot utime: Operation not permitted' / 'Cannot change mode to rwx-----T'), breaking the Semrel Release workflow on every push to main. Fix: extract into a fresh /tmp/semrel-dl subdir (owned by the runner) and move the binary out, instead of extracting straight into /tmp. --- .github/workflows/semrel-release.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/semrel-release.yaml b/.github/workflows/semrel-release.yaml index 00d9de5..b8f9a9c 100644 --- a/.github/workflows/semrel-release.yaml +++ b/.github/workflows/semrel-release.yaml @@ -48,7 +48,9 @@ jobs: VERSION=$(gh release view --repo SemRels/semrel --json tagName -q .tagName) gh release download "$VERSION" --repo SemRels/semrel \ --pattern "semrel_*_linux_amd64.tar.gz" --dir /tmp - tar -xzf /tmp/semrel_*_linux_amd64.tar.gz -C /tmp + mkdir -p /tmp/semrel-dl + tar -xzf /tmp/semrel_*_linux_amd64.tar.gz -C /tmp/semrel-dl + mv /tmp/semrel-dl/semrel /tmp/semrel chmod +x /tmp/semrel echo "semrel $(/tmp/semrel --version 2>/dev/null || /tmp/semrel version 2>/dev/null || echo installed)"