1414# Minimal top-level permissions; jobs can extend as needed
1515permissions :
1616 contents : read
17- id-token : write # Required for OIDC (Vault / shared workflows)
17+ id-token : write # Required for OIDC (Vault / shared workflows)
1818
1919# Prevent duplicate runs on the same ref.
2020# For PRs: cancel older in-progress runs when new commits are pushed.
2727 ci :
2828 name : CI
2929
30- uses : grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v5 .1.0
30+ uses : grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v6 .1.1
3131
3232 # Only run CI job for PRs / non-main refs.
3333 # Main publishing is handled by the CD workflow below.
3939 id-token : write
4040
4141 with :
42- go-version : ' 1.26.0'
43- golangci-lint-version : ' 2.10.1'
44-
4542 # Ensure PR builds produce unique plugin versions.
4643 # For PR events, suffix with the head SHA; otherwise leave empty.
4744 plugin-version-suffix : ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }}
@@ -57,20 +54,20 @@ jobs:
5754 # Publishing requires write permissions + OIDC
5855 permissions :
5956 attestations : write
60- contents : write # Required to publish artifacts
61- id-token : write # OIDC for Vault / signing
57+ contents : write # Required to publish artifacts
58+ id-token : write # OIDC for Vault / signing
6259
6360 with :
6461 # This is a "publish latest" flow, not a full release
6562 disable-docs-publishing : true
6663 disable-github-release : true
6764
6865 # Target the dev catalog environment (used by Cloud E2E)
69- environment : ' dev'
66+ environment : " dev"
7067
7168 # Keep toolchain consistent with CI job
72- go-version : ' 1.26.0'
73- golangci-lint-version : ' 2.10.1'
69+ go-version : " 1.26.0"
70+ golangci-lint-version : " 2.10.1"
7471
7572 # Suffix artifact with commit SHA for traceability and uniqueness
7673 plugin-version-suffix : ${{ github.sha }}
0 commit comments