Merge pull request #2209 from coreosbot-releng/repo-templates

Sync repo templates ⚙

Author: yasminvalim

.github/ISSUE_TEMPLATE/release-checklist.md

@@ -52,7 +52,7 @@ Fedora packaging:
 GitHub release:
  - [ ] Wait until the Bodhi update shows "Signed :heavy_check_mark:" in the Metadata box.
  - [ ] Verify that the signing script can fetch the release binaries by running `./signing-ticket.sh test <x.y.z-r> <output-dir>`, where `r` is the Release of the Fedora package without the dist tag (probably `1`)
- - [ ] Run `./signing-ticket.sh ticket <x.y.z-r>` and paste the output into a [releng ticket](forge.fedoraproject.org/releng/tickets/issues/new).
+ - [ ] Run `./signing-ticket.sh ticket <x.y.z-r>` and paste the output into a [releng ticket](https://forge.fedoraproject.org/releng/tickets/issues/new).
  - [ ] Wait for the ticket to be closed
  - [ ] Download the artifacts and signatures
  - [ ] Verify the signatures

.github/workflows/go.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v5
       with:
         go-version: ${{ matrix.go-version }}
     - name: Check out repository
@@ -52,7 +52,7 @@ jobs:
         fi
         echo "All Go files are correctly formatted."
     - name: Run linter
-      uses: golangci/golangci-lint-action@v9
+      uses: golangci/golangci-lint-action@v8
       with:
         version: v2.6.2
   regenerate:
@@ -62,7 +62,7 @@ jobs:
     - name: Check out repository
       uses: actions/checkout@v6
     - name: Set up Go 1.x
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v5
       with:
         go-version: 1.25.x
     - name: Install schematyper

.github/workflows/ignition-validate.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v5
       with:
         go-version: ${{ matrix.go-version }}
     - name: Check out repository

signing-ticket.sh

@@ -33,7 +33,7 @@ do_sign() {
 # Grab the binaries out of the redistributable rpm
 rpm="ignition-validate-redistributable-${VR}.noarch.rpm"
 koji download-build --key $RPMKEY --rpm $rpm
-rpm -qip $rpm | grep -P "^Signature.*${RPMKEY}$" # Verify the output has the key in it
+rpm -Kv "$rpm" 2>&1 | grep -qi "${RPMKEY}" # Verify the output has the key in it
 rpm2cpio $rpm | cpio -idv './usr/share/ignition/ignition-validate-*'
 
 # Rename the binaries