The 3.1.5 tag was created server-side by publishing the GitHub release, which can only produce a lightweight ref, so it carries no signature and git verify-tag fails on it. Rather than force-move a published tag, state that signing starts at 3.1.6 and cut that tag locally with git tag -s before the release is published. vtag.yml now fails the run when the pushed tag is not a tag object, so the same mistake shows up as a red check on the release instead of arriving as a user report. The mirror step runs first, so v<tag> is still created; its early "already exists" return became an else branch so the check is never skipped. https://github.com/acmesh-official/acme.sh/issues/7273
138e0dff84
·
2026-09-20 13:06:37 +02:00
History