From 17b20616f33a493afac4be5a24f580aa737cef24 Mon Sep 17 00:00:00 2001
From: libops-agent <115990865+libops-agent@users.noreply.github.com>
Date: Sat, 22 Aug 2026 19:52:17 +0000
Subject: [PATCH] [patch] Pin shared rolling package publisher

---
 .github/workflows/sitectl-plugin-goreleaser.yaml  | 8 ++++----
 ci/github/sitectl_plugin_release_contract_test.go | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/sitectl-plugin-goreleaser.yaml b/.github/workflows/sitectl-plugin-goreleaser.yaml
index 7a1caef..25860a0 100644
--- a/.github/workflows/sitectl-plugin-goreleaser.yaml
+++ b/.github/workflows/sitectl-plugin-goreleaser.yaml
@@ -305,7 +305,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           repository: libops/terraform-linux-packages
-          ref: 72e96d0e82e1a6992d08b98f6fb8c07ccc90c989 # main
+          ref: 3864ea410d49df5b0ee0ddcf2b2d18243167edda # main
           path: .libops-packages
           persist-credentials: false
 
@@ -313,7 +313,7 @@ jobs:
         shell: bash
         working-directory: .libops-packages
         env:
-          PACKAGE_PUBLISHER_SHA: 72e96d0e82e1a6992d08b98f6fb8c07ccc90c989
+          PACKAGE_PUBLISHER_SHA: 3864ea410d49df5b0ee0ddcf2b2d18243167edda
         run: |
           set -euo pipefail
           if [[ ! "$PACKAGE_PUBLISHER_SHA" =~ ^[0-9a-f]{40}$ ]]; then
@@ -339,7 +339,7 @@ jobs:
         shell: bash
         working-directory: .libops-packages
         env:
-          PACKAGE_PUBLISHER_SHA: 72e96d0e82e1a6992d08b98f6fb8c07ccc90c989
+          PACKAGE_PUBLISHER_SHA: 3864ea410d49df5b0ee0ddcf2b2d18243167edda
         run: |
           set -euo pipefail
           image="libops/terraform-linux-packages:publisher-${PACKAGE_PUBLISHER_SHA}"
@@ -380,5 +380,5 @@ jobs:
           RELEASE_VERSION: ${{ inputs.release-mode == 'full' && needs.release.outputs.version || inputs.release-version }}
           PACKAGE_TOOLS_IMAGE: ${{ steps.package-tools.outputs.image }}
           EXPECTED_PACKAGE_TOOLS_IMAGE_ID: ${{ steps.package-tools.outputs.image-id }}
-          PACKAGE_PUBLISHER_SHA: 72e96d0e82e1a6992d08b98f6fb8c07ccc90c989
+          PACKAGE_PUBLISHER_SHA: 3864ea410d49df5b0ee0ddcf2b2d18243167edda
         run: bash scripts/publish-release-from-environment.sh
diff --git a/ci/github/sitectl_plugin_release_contract_test.go b/ci/github/sitectl_plugin_release_contract_test.go
index beaa3b2..03d1ded 100644
--- a/ci/github/sitectl_plugin_release_contract_test.go
+++ b/ci/github/sitectl_plugin_release_contract_test.go
@@ -8,7 +8,7 @@ import (
 	"testing"
 )
 
-const linuxPackagePublisherCommit = "72e96d0e82e1a6992d08b98f6fb8c07ccc90c989"
+const linuxPackagePublisherCommit = "3864ea410d49df5b0ee0ddcf2b2d18243167edda"
 
 func pluginReleaseWorkflow(t *testing.T) string {
 	t.Helper()