From d733a720af97697d7f7ebc6304816a694d78fcb2 Mon Sep 17 00:00:00 2001
From: "privilegedescalation-paperclip[bot]"
 <268365651+privilegedescalation-paperclip[bot]@users.noreply.github.com>
Date: Thu, 19 Mar 2026 21:32:56 +0000
Subject: [PATCH] fix: install gh CLI to user-writable path on ARC runners
 (#29)

ARC runner containers run as non-root, so `mv` to /usr/local/bin fails
with permission denied. Install to $HOME/.local/bin instead and add to
GITHUB_PATH.

Co-authored-by: Hugh Hackman [bot] <hugh-hackman[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/plugin-release.yaml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/plugin-release.yaml b/.github/workflows/plugin-release.yaml
index efbccf9..85923e6 100644
--- a/.github/workflows/plugin-release.yaml
+++ b/.github/workflows/plugin-release.yaml
@@ -156,9 +156,11 @@ jobs:
             GH_VERSION="2.74.0"
             curl -fsSL "https://github.com/cli/cli/releases/download/v${GH_VERSION}/gh_${GH_VERSION}_linux_amd64.tar.gz" -o /tmp/gh.tar.gz
             tar -xzf /tmp/gh.tar.gz -C /tmp
-            mv "/tmp/gh_${GH_VERSION}_linux_amd64/bin/gh" /usr/local/bin/gh
+            mkdir -p "$HOME/.local/bin"
+            mv "/tmp/gh_${GH_VERSION}_linux_amd64/bin/gh" "$HOME/.local/bin/gh"
             rm -rf /tmp/gh.tar.gz "/tmp/gh_${GH_VERSION}_linux_amd64"
-            gh --version
+            echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+            "$HOME/.local/bin/gh" --version
           fi
 
       - name: Create PR for version bump