From b86dda52874c17251253148b320b5cd5cdf9e393 Mon Sep 17 00:00:00 2001 From: josegironn <30703536+josegironn@users.noreply.github.com> Date: Thu, 23 Jul 2026 21:36:17 -0700 Subject: [PATCH] fix(release): drop per-object ACL from S3 blob uploads The v1.0.9 release failed twice at the blob publish step ("could not apply before write") - goreleaser's per-object ACL path under version: latest. Public read is already served by the bucket policy on major-cli-releases, so the ACL is unnecessary as well as broken. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01Sr2JDGa6iLoTHnqwHe7Ltf Co-authored-by: Orca --- .goreleaser.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.goreleaser.yaml b/.goreleaser.yaml index fd13ca1..24b5aa1 100644 --- a/.goreleaser.yaml +++ b/.goreleaser.yaml @@ -60,4 +60,7 @@ blobs: bucket: major-cli-releases region: us-west-1 directory: "{{ .Version }}" - acl: public-read + # Public read is served by the bucket policy on major-cli-releases + # (terraform/global/releases.tf in mono-builder); goreleaser must not set + # per-object ACLs - its ACL upload path regressed under version: latest + # and broke the v1.0.9 release twice ("could not apply before write").