From e630c92385bf7057552df9904ade558f4404ce3d Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Wed, 14 Oct 2026 17:08:01 +0000
Subject: [PATCH] ci(release): Bump craft to 2.34.1

The c6e2f04 (2.19.0) pin expands github.action_ref inside a composite
run step, where it is always empty (actions/runner#2473). The action
then falls back to an unauthenticated releases/latest API call, which
403s when the shared runner IP is rate limited. 2.34.1 passes the ref
via env and resolves the SHA pin to its own release download.

Co-Authored-By: Joshua Li <14209781+joshuarli@users.noreply.github.com>
---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 51d44be..d357609 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
           token: ${{ steps.token.outputs.token }}
           fetch-depth: 0
       - name: Prepare release
-        uses: getsentry/craft@c6e2f04939b6ee67030588afbb5af76b127d8203 # v2
+        uses: getsentry/craft@3f2abdc5703191d12ef2cc013f792f1bd220f44d # v2.34.1
         env:
           GITHUB_TOKEN: ${{ steps.token.outputs.token }}
         with: