ci: fix docker/setup-qemu-action SHA (v3 tag force-pushed upstream)

[polaz]

Summary

• Updates docker/setup-qemu-action pin from deleted SHA 29109295 to c7c53464 (v3.7.0)
• SHA 29109295 was removed when the upstream v3 tag was force-pushed; GitHub Actions fails to resolve it even for steps with if: conditions

Closes #49

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 737f446d-1323-460d-a8c0-191bd8eb0cc5

📥 Commits

Reviewing files that changed from the base of the PR and between 1306626 and d943955.

⛔ Files ignored due to path filters (1)

• coordinode-embedded/Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• coordinode-embedded/.gitignore

💤 Files with no reviewable changes (1)

• coordinode-embedded/.gitignore

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated embedded build setup to use a newer QEMU setup for improved build stability.
  • Adjusted repository ignore rules to exclude the embedded build output directory.
  • No user-facing functionality changes in this release.

Walkthrough

Release workflow now pins docker/setup-qemu-action to v3.7.0 instead of the v3 tag; separately, coordinode-embedded/.gitignore adds target/ and removes the explicit Cargo.lock ignore.

Changes

GitHub Actions: QEMU action pin

Layer / File(s)	Summary
Workflow Config .github/workflows/release.yml	Set up QEMU step updated: docker/setup-qemu-action ref changed from v3 (previously resolved to a broken SHA) to the pinned v3.7.0.

Embedded repo ignore rules

Layer / File(s)	Summary
Ignore rules coordinode-embedded/.gitignore	Added target/ and removed the explicit Cargo.lock ignore entry.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• ci(release): fix embedded wheel builds for Windows, macOS, and Linux aarch64 #40 — Also modifies .github/workflows/release.yml around the docker/setup-qemu-action usage (related pin/conditioning changes).

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Out of Scope Changes check	⚠️ Warning	The .gitignore modification (removing Cargo.lock ignore, adding target/ ignore) appears unrelated to the stated objective of fixing the GitHub Actions workflow reference.	The .gitignore changes should be moved to a separate PR focused on build artifact management, or clarify their relationship to the docker/setup-qemu-action fix if intentional.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: updating the docker/setup-qemu-action SHA reference due to upstream tag force-push.
Description check	✅ Passed	The description is directly related to the changeset, explaining the motivation for updating the QEMU action reference and the specific SHAs involved.
Linked Issues check	✅ Passed	The PR successfully addresses issue #49 by updating the docker/setup-qemu-action SHA from the deleted 29109295 to c7c53464 (v3.7.0) as required.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ci/#49-fix-qemu-action-pin

---

_{Review rate limit: 3/5 reviews remaining, refill in 20 minutes and 30 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud