Merge pull request #487 from Hack23/copilot/improve-release-workflow

fix: resolve release workflow warnings — replace deprecated attest-sbom, remove broken apt cache

Author: pethers

.github/release-drafter.yml

@@ -93,8 +93,8 @@ template: |
   - ⚡ **Vite** - Fast build tool and dev server
   - ⚛️ **React 19** - Modern React with hooks  
   - 🔷 **TypeScript** - Strict typing with latest standards
-  - 🎮 **PixiJS 8.x** - High-performance WebGL renderer
-  - 🎵 **Howler.js** - Audio library for games
+  - 🎮 **Three.js** - High-performance 3D WebGL renderer
+  - 🎨 **@react-three/fiber** - React renderer for Three.js
   - 🧪 **Vitest** - Fast unit testing with coverage
   - 🌲 **Cypress** - Reliable E2E testing
 

.github/workflows/release.yml

@@ -50,14 +50,6 @@ jobs:
           echo "version=${VERSION}" >> $GITHUB_OUTPUT
           echo "Version: ${VERSION}"
 
-      - name: Cache apt packages
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
-        with:
-          path: /var/cache/apt/archives
-          key: ${{ runner.os }}-apt-${{ hashFiles('.github/workflows/release.yml') }}
-          restore-keys: |
-            ${{ runner.os }}-apt-
-
       - name: Setup display and dependencies
         run: |
           sudo apt-get update
@@ -71,14 +63,6 @@ jobs:
           node-version: "24"
           cache: "npm"
 
-      - name: Cache dependencies
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
-
       - name: Cache Cypress binary
         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         with:
@@ -151,14 +135,6 @@ jobs:
           node-version: "24"
           cache: "npm"
 
-      - name: Cache dependencies
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
-
       - name: Install dependencies
         run: npm ci
 
@@ -211,7 +187,7 @@ jobs:
 
       - name: Generate SBOM attestation
         id: attestsbom
-        uses: actions/attest-sbom@07e74fc4e78d1aad915e867f9a094073a9f71527 # v4.0.0
+        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
         with:
           subject-path: game-${{ needs.prepare.outputs.version }}.zip
           sbom-path: game-${{ needs.prepare.outputs.version }}.spdx.json