From 3e336f463c527d2af8f291dd9131aef02efa0a09 Mon Sep 17 00:00:00 2001
From: ghost <49853598+JSONbored@users.noreply.github.com>
Date: Mon, 29 Jun 2026 04:14:49 -0700
Subject: [PATCH] ci(selfhost): pin sentry release cli

---
 .github/workflows/release-selfhost.yml | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release-selfhost.yml b/.github/workflows/release-selfhost.yml
index 40d7c6afc3..3d6897765c 100644
--- a/.github/workflows/release-selfhost.yml
+++ b/.github/workflows/release-selfhost.yml
@@ -72,11 +72,12 @@ jobs:
           test -n "$SENTRY_AUTH_TOKEN"
           test -n "$SENTRY_ORG"
           test -n "$SENTRY_PROJECT"
-          npx -y @sentry/cli@latest releases new "$SENTRY_RELEASE"
-          npx -y @sentry/cli@latest releases set-commits "$SENTRY_RELEASE" --auto
-          npx -y @sentry/cli@latest sourcemaps inject dist
+          SENTRY_CLI=(npx -y --package @sentry/cli@2.58.2 sentry-cli)
+          "${SENTRY_CLI[@]}" releases new "$SENTRY_RELEASE"
+          "${SENTRY_CLI[@]}" releases set-commits "$SENTRY_RELEASE" --auto
+          "${SENTRY_CLI[@]}" sourcemaps inject dist
           node scripts/validate-selfhost-sourcemap.mjs
-          npx -y @sentry/cli@latest sourcemaps upload --release="$SENTRY_RELEASE" dist
+          "${SENTRY_CLI[@]}" sourcemaps upload --release="$SENTRY_RELEASE" dist
 
       - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
       - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
@@ -122,7 +123,7 @@ jobs:
           SENTRY_ORG: ${{ vars.SENTRY_ORG }}
           SENTRY_PROJECT: ${{ vars.SENTRY_PROJECT }}
           SENTRY_RELEASE: ${{ steps.version.outputs.release }}
-        run: npx -y @sentry/cli@latest releases finalize "$SENTRY_RELEASE"
+        run: npx -y --package @sentry/cli@2.58.2 sentry-cli releases finalize "$SENTRY_RELEASE"
 
       - name: GitHub Release
         if: github.event_name == 'push'