From d8d13d5e555446ad72af2f14e4395bf8586b90c4 Mon Sep 17 00:00:00 2001 From: Stran Dutton Date: Wed, 13 May 2026 12:13:59 -0500 Subject: [PATCH] chore: migrate digicert signing action to Node.js 24 successor - BED-8168 digicert/ssm-code-signing has been deprecated by the upstream maintainer and will not receive further updates, including a Node.js 24 runtime upgrade. Per the maintainer's guidance, migrate to the successor action digicert/code-signing-software-trust-action@v1.2.1, which runs on Node.js 24 and preserves the PKCS11_CONFIG output our sign job consumes. Upstream notice: https://github.com/digicert/ssm-code-signing/issues/60 --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 659ca66..8138e60 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -98,7 +98,7 @@ jobs: - name: Install DigiCert Client Tools id: digicert - uses: digicert/ssm-code-signing@1d820463733701cf1484c7eb5d7d24a15ca2c454 # ratchet:digicert/ssm-code-signing@v1.2.1 + uses: digicert/code-signing-software-trust-action@fae23a455ba4bde62b64fd7cb2f81ade788f5a95 # ratchet:digicert/code-signing-software-trust-action@v1.2.1 - name: Set PKCS#11 Paths id: pkcs11