From a22c0a368e6bb5a89ad669034ba0390a94a9243d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fredrik=20Adel=C3=B6w?= <freben@gmail.com>
Date: Thu, 26 Feb 2026 14:44:02 +0100
Subject: [PATCH] use a distinct hash instead
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Fredrik Adelöw <freben@gmail.com>
---
 .github/workflows/verify_docs-quality.yml | 12 ++++++------
 scripts/check-docs-quality.js             |  1 +
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/verify_docs-quality.yml b/.github/workflows/verify_docs-quality.yml
index ef8bb40d18..6ace7d72a3 100644
--- a/.github/workflows/verify_docs-quality.yml
+++ b/.github/workflows/verify_docs-quality.yml
@@ -24,20 +24,20 @@ jobs:
       - name: Install vale
         run: |
           VALE_VERSION="3.7.1"
-          VALE_REPO="errata-ai/vale"
+          VALE_CHECKSUM="ba4924bf2c5884499f09b02a6eb3318b29df40a3e81701c0804b9b1aefcd9483"
           VALE_DIST_DIR="/tmp/vale-dist"
+          VALE_ARCHIVE="vale_${VALE_VERSION}_Linux_64-bit.tar.gz"
 
           mkdir -p "$VALE_DIST_DIR"
 
-          # Download pinned Vale binary and corresponding checksums file
-          gh release download "v${VALE_VERSION}" --repo "$VALE_REPO" --pattern "vale_${VALE_VERSION}_Linux_64-bit.tar.gz" --dir "$VALE_DIST_DIR"
-          gh release download "v${VALE_VERSION}" --repo "$VALE_REPO" --pattern "vale_${VALE_VERSION}_checksums.txt" --dir "$VALE_DIST_DIR"
+          # Download pinned Vale binary
+          curl -fsSL -H "Authorization: token $GH_TOKEN" "https://github.com/errata-ai/vale/releases/download/v${VALE_VERSION}/${VALE_ARCHIVE}" -o "$VALE_DIST_DIR/$VALE_ARCHIVE"
 
           # Verify the integrity of the downloaded archive
-          (cd "$VALE_DIST_DIR" && sha256sum --check --ignore-missing "vale_${VALE_VERSION}_checksums.txt")
+          echo "$VALE_CHECKSUM  $VALE_DIST_DIR/$VALE_ARCHIVE" | sha256sum --check
 
           mkdir -p "$HOME/.local/bin"
-          tar -xzf "$VALE_DIST_DIR/vale_${VALE_VERSION}_Linux_64-bit.tar.gz" -C "$HOME/.local/bin" vale
+          tar -xzf "$VALE_DIST_DIR/$VALE_ARCHIVE" -C "$HOME/.local/bin" vale
           echo "$HOME/.local/bin" >> "$GITHUB_PATH"
           vale --version
         env:
diff --git a/scripts/check-docs-quality.js b/scripts/check-docs-quality.js
index 057d4580df..06383539c3 100755
--- a/scripts/check-docs-quality.js
+++ b/scripts/check-docs-quality.js
@@ -36,6 +36,7 @@ const IGNORED_WHEN_LISTING = [
 const IGNORED_WHEN_EXPLICIT = [
   /^ADOPTERS\.md$/,
   /^OWNERS\.md$/,
+  /^.*[/\\]CHANGELOG\.md$/, // generated from changesets anyway - THOSE should have been checked earlier
   /^.*[/\\]knip-report\.md$/,
 ];