mirror of
https://github.com/semantica-agi/semantica.git
synced 2026-09-02 04:00:40 +00:00
Address ZohaibHassan16's review: the workflow_run path called setup-semantica without a version constraint, so it installed whatever's latest on PyPI and only compared afterwards - a release published shortly before a newer one, or a rerun after a newer release, could report a false failure. Derive the expected version from the triggering tag and pass it straight into the composite action's version input so pip installs (and thus verifies) the exact release that triggered the run. Also make the composite action's pip caching opt-in (default disabled): actions/setup-python errors out when cache: 'pip' is enabled but no requirements.txt/pyproject.toml/etc. exists in the caller repo, which would break the action for downstream repos that adopt it standalone per the README example.