fix(release): pin the plugin-vendor commit to the public author identity #370

Merged

hexajon merged 1 commit from fix/plugin-vendor-identity into main

2026-07-29 01:34:11 +00:00

hexajon commented

2026-07-29 01:34:07 +00:00

(Migrated from codeberg.org)

Summary

The plugin-artifact vendor step commits inside a fresh clone that has no repo-local git identity, so the commit fell back to the machine's global git identity rather than the public author. Pin the author and committer to hexajon jon@sixfold.space before the commit - matching the commit_author goreleaser already stamps on the Homebrew cask and Scoop manifest satellites - and add a drift-guard test that fails if the pin is dropped or moved after the commit.

## Summary The plugin-artifact vendor step commits inside a fresh clone that has no repo-local git identity, so the commit fell back to the machine's global git identity rather than the public author. Pin the author and committer to hexajon <jon@sixfold.space> before the commit - matching the commit_author goreleaser already stamps on the Homebrew cask and Scoop manifest satellites - and add a drift-guard test that fails if the pin is dropped or moved after the commit.