BUILD-10765 Update gh-action_release to v6.4.0

[mikolaj-matuszny-ext-sonarsource]

Summary

• Update gh-action_release to v6.4.0 (7b055eca5ce771ff254fbec2697c0fc1c7207e1e)

Test plan

• Verify release workflow runs successfully

[hashicorp-vault-sonar-prod]

BUILD-10765

[sonarqubecloud]

SonarQube reviewer guide

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 Dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonar-review-alpha]

Summary

Pins the gh-action_release workflow to a specific commit SHA (7b055eca...) instead of a feature branch. This stabilizes the release workflow by moving from a mutable branch reference (feat/tom/BUILD-7998) to an immutable version commit, improving reproducibility and preventing accidental workflow changes.

What reviewers should know

This is a single-line change in .github/workflows/release.yml. Verify the commit SHA matches the intended v6.4.0 version from the SonarSource/gh-action_release repository. The main risk would be pinning to the wrong commit or an unexpected behavior change in the new version — the test plan of running the release workflow should catch this.

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[sonar-review-alpha]

Conclusion: Clean, low-risk change. Replaces a mutable feature branch reference with a pinned SHA — a clear improvement to release workflow stability.

🗣️ Give feedback