_release.yml

on:
  workflow_call:

jobs:
  artifacts:
    runs-on: ubuntu-latest

    steps:
      - name: Download artifacts
<<<<<<< before updating
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
=======
        uses: actions/download-artifact@v8
>>>>>>> after updating
        with:
          merge-multiple: true

      - name: Zip up docs
        run: |
          set -vxeuo pipefail
          if [ -d html ]; then
            mv html $GITHUB_REF_NAME
            zip -r docs.zip $GITHUB_REF_NAME
            rm -rf $GITHUB_REF_NAME
          fi

      - name: Create GitHub Release
        # We pin to the SHA, not the tag, for security reasons.
        # https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
<<<<<<< before updating
        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
=======
        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
>>>>>>> after updating
        with:
          prerelease: ${{ contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc') }}
          name: ${{ github.ref_name }}
          files: "*"
          generate_release_notes: true
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}