mirror of
https://github.com/openai/codex.git
synced 2026-09-20 12:47:38 +00:00
## Why The WinGet Releaser action references `cargo-binstall@main`, violating the requirement for full commit SHA action pins. ## What changed Replace the action with explicit steps that install SHA-pinned `cargo-binstall` version `1.23.0` and `komac` version `2.16.0`. Discover the published Windows archive URLs and require two matching assets before submitting the `OpenAI.Codex` update. Use `komac` to sync the publishing fork, submit the WinGet update, and clean up merged branches. GitOrigin-RevId: da4da51937a372b841f42420b5bf775a9c151e4e