From 92eed8915fa99bfb22194d2ffaeb6a3323fc3544 Mon Sep 17 00:00:00 2001
From: Ryan <ryan.hall@datadoghq.com>
Date: Wed, 9 Sep 2026 15:21:18 -0400
Subject: [PATCH] Disable Sigstore attestations in publish workflow

The rubygems-attestation-patch.rb injected by release-gem activates the
system openssl 3.2.2 (default gem in Ruby 3.3) before Bundler can load
openssl 4.0.2 from the lockfile, causing a Gem::LoadError on
'bundle exec rake release'.

Disabling attestations removes the RUBYOPT injection and unblocks gem
publishing. The release process is otherwise identical: gem build, git
tag, gem push via OIDC Trusted Publishing.
---
 .github/workflows/publish.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 561edd7..1b76b82 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -58,3 +58,4 @@ jobs:
         uses: rubygems/release-gem@052cc82692552de3ef2b81fd670e41d13cba8092 # v1.4.0
         with:
           token: ${{ steps.octo-sts.outputs.token }}
+          attestations: false