zoxide/0.9.7 package update

[octo-sts]

[octo-sts]

⚠️ EXPERIMENTAL

Please use 👍 or 👎 on this comment to indicate if you agree or disagree with the recommendation.

To provide more detailed feedback please comment on the recommendation prefixed with /ai-verify:

e.g. /ai-verify partially helpful but I also added bash to the build environment

Gen AI suggestions to solve the build error:

• Detected Error: "Expected commit 06f9f3f27ccebe19bd1e04b9a312c489b9c64b48 for v0.9.7, found d74bce3b7418ed965f5056297db8bb081a29121c"

• Error Category: Version/Commit Hash Mismatch

• Failure Point: Git checkout step verification of commit hash

• Root Cause Analysis: The expected commit hash in the melange YAML doesn't match the actual commit hash for the tag v0.9.7 in the repository

• Suggested Fix:
Update the expected-commit hash in the git-checkout step:

  - uses: git-checkout
    with:
      repository: https://github.com/ajeetdsouza/zoxide
      tag: v${{package.version}}
      expected-commit: d74bce3b7418ed965f5056297db8bb081a29121c

• Explanation: The build system verifies the integrity of the source code by checking the commit hash. The current hash in the configuration doesn't match the actual commit that the v0.9.7 tag points to. Updating to the correct hash will allow the checkout to proceed.

• Additional Notes:

• This is a common issue when package versions are updated
• The commit hash can be verified using:

  git ls-remote https://github.com/ajeetdsouza/zoxide refs/tags/v0.9.7

• Always verify the commit hash when updating package versions

• References:

• https://github.com/ajeetdsouza/zoxide/releases/tag/v0.9.7
• https://github.com/chainguard-dev/melange/blob/main/docs/source-validation.md

[debasishbsws]

not sure why is it getting the wrong commit SHA? if the github API is getting the wrong one, the automation will create another PR just to change the commit SHA with an epoch bump,