Skip to content

ci: bump publish-platforms pin to the multipart-JSON fix - #455

Open
tastybento wants to merge 2 commits into
developfrom
ci/publish-platforms-pin
Open

ci: bump publish-platforms pin to the multipart-JSON fix#455
tastybento wants to merge 2 commits into
developfrom
ci/publish-platforms-pin

Conversation

@tastybento

Copy link
Copy Markdown
Member

What

Bumps the pinned SHA of the shared publish-platforms.yml reusable workflow to 1f91a0e (master HEAD of BentoBoxWorld/.github).

Why

The pinned version passes the CurseForge metadata and Hangar versionUpload multipart JSON as an inline curl value:

-F "metadata=${META};type=application/json"

curl reads a ; inside an inline -F value as the start of a type=/filename= attribute, so the JSON is silently truncated at the first semicolon in the release body. Both platforms then reject the upload:

  • CurseForge — {"errorCode":1002,"errorMessage":"Error in field \metadata`: Invalid JSON."}`
  • Hangar — {"status":400,"detail":"Failed to read request"}

This is latent, not theoretical: it took down the AOneBlock 1.26.3 publish (run) because those release notes happened to contain one semicolon. Any release body with a semicolon in it trips this.

BentoBoxWorld/.github#13 fixed it on 2026-07-20 by writing the JSON to a file and using curl's <file form (-F "metadata=<cf_meta.json;type=application/json"). This repo was still pinned to the commit before that fix.

Modrinth publishing is unaffected — it does not go through this workflow.

No behaviour change beyond the fix; the pin is the only line touched.

🤖 Generated with Claude Code

https://claude.ai/code/session_01SAQ3YQkcfRoCZEwa6SPJcp

tastybento and others added 2 commits July 29, 2026 09:07
The pinned SHA predates BentoBoxWorld/.github#13, which moved the CurseForge
metadata and Hangar versionUpload JSON out of inline curl -F values and into
files. curl treats a ';' in an inline -F value as the start of a type=
attribute, so a release body containing a semicolon truncates the JSON and
both platforms reject the upload.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SAQ3YQkcfRoCZEwa6SPJcp
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SAQ3YQkcfRoCZEwa6SPJcp
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant