Skip to content

ci: unpin the Speakeasy CLI - #11

Merged
laurencemcknight merged 1 commit into
mainfrom
unpin-speakeasy-cli
Aug 24, 2026
Merged

ci: unpin the Speakeasy CLI#11
laurencemcknight merged 1 commit into
mainfrom
unpin-speakeasy-cli

Conversation

@laurencemcknight

Copy link
Copy Markdown
Contributor

Why

Reverts the pin from #10. It should not stay, for two independent reasons.

It never did anything. speakeasy_version is marked [DEPRECATED] on workflow-executor@v15 and is silently disregarded. Visible in the container args of run 32749499058 — the action received "1.795.1" and then logged:

Downloading speakeasy cli version:  v1.795.3
speakeasy version 1.795.3

A pin that reads as load-bearing but is inert is worse than no pin.

The underlying bug is fixed upstream. CLI v1.795.3 (2026-08-24 16:00Z) shipped speakeasy#2120"revert: bump speakeasy-core/client-sdk-go (#2117) — restores registry auth" — putting it back on client-sdk-go v3.26.7. The 403 on speakeasy tag promote is gone, so unpinned latest is correct again.

What

Deletes the five added lines, restoring the file byte-for-byte to its pre-#10 state (blob 532cf34).

No behaviour change: the input was ignored, so generation resolves the same CLI either way.

Note on the recovery

Publishing was recovered separately by a force=true run, which was required — the failed 2026-08-24 14:52 run had already committed the regenerated SDK and updated gen.lock, leaving no spec diff for an unforced run to act on. That run logged 0 changes detected and versioning: generation forced, bumping patch version, shipping npm 0.9.3. v0.9.2 remains a git tag that never reached npm.

Reverts the speakeasy_version pin added in #10. Two reasons it should go:

1. It never took effect. `speakeasy_version` is marked [DEPRECATED] on
   workflow-executor@v15 and is silently ignored -- run 32749499058 was handed
   "1.795.1" and downloaded v1.795.3 regardless. Keeping it implies a control
   that does not exist.
2. The bug it was pinning away from is fixed upstream. CLI v1.795.3 (2026-08-24
   16:00Z) reverted the client-sdk-go v3.27.0 bump that had stripped auth from
   the Artifacts.* methods, restoring registry auth for `speakeasy tag promote`.

Restores the file byte-for-byte to its pre-#10 state.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@laurencemcknight
laurencemcknight merged commit 2e720c3 into main Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant