All the version tags got relabled to point to a compromised hash. Semver does nothing to help with this. your build should always use hashes and not version ta

All the version tags got relabled to point to a compromised hash. Semver does nothing to help with this. your build should always use hashes and not version tags of GHA's