From d3757aafab8778d17151844aca7f0764ded9248e Mon Sep 17 00:00:00 2001
From: Jeri Lane <jeri.lane@temporal.io>
Date: Wed, 26 Aug 2026 12:12:00 -0700
Subject: [PATCH 1/2] Update go version to match temporalio/cli

---
 go.mod                           | 2 +-
 temporalcloudcli/commands.gen.go | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/go.mod b/go.mod
index 27480df..bd0ba80 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/temporalio/cloud-cli
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.41.11
diff --git a/temporalcloudcli/commands.gen.go b/temporalcloudcli/commands.gen.go
index 6e630f9..4dca4f7 100644
--- a/temporalcloudcli/commands.gen.go
+++ b/temporalcloudcli/commands.gen.go
@@ -24,7 +24,7 @@ type ClientOptions struct {
 
 func (v *ClientOptions) BuildFlags(f *pflag.FlagSet) {
 	v.FlagSet = f
-	f.StringVar(&v.ApiKey, "api-key", "", "API key for authenticating with Temporal Cloud. Can be used instead of interactive login for automation and CI/CD pipelines.")
+	f.StringVar(&v.ApiKey, "api-key", "", "API key for authenticating with Temporal Cloud. Can be used instead of interactive login for automation and CI/CD pipelines. Env: TEMPORAL_API_KEY.")
 	f.StringVar(&v.Server, "server", "saas-api.tmprl.cloud:443", "Override the Temporal Cloud API server address. Used for connecting to non-production environments.")
 	_ = f.MarkHidden("server")
 }

From f8c534ca7703de0ccc98d8e4a8461909523adac1 Mon Sep 17 00:00:00 2001
From: Jeri Lane <jeri.lane@temporal.io>
Date: Wed, 26 Aug 2026 11:46:02 -0700
Subject: [PATCH 2/2] Update release workflow to support immutable releases   *
 Use latest goreleaser   * Run release workflow on every new tag   * Keep
 release as draft

---
 .github/workflows/release.yml | 9 ++++++---
 .goreleaser.yml               | 5 ++++-
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 05206cf..3095e82 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,7 +4,10 @@ on:
   workflow_dispatch:
   release:
     types:
-      - published
+      - created
+  push:
+    tags:
+      - "*"
 
 permissions:
   contents: write
@@ -47,9 +50,9 @@ jobs:
         run: echo "go=$(go version | cut -d ' ' -f 3)" >> "$GITHUB_OUTPUT"
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
+        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
         with:
-          version: v2.12.7
+          version: v2.18.0
           args: release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 26f7d3c..04cb626 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -5,8 +5,11 @@ before:
     - go mod download
 
 release:
+  preflight:
+    fail_on_error: true
   prerelease: auto
-  draft: false
+  draft: true
+  replace_existing_draft: true
   name_template: "v{{.Version}}"
 
 archives: