Malformed Tag version is causing Dependabot to fail

[IAreKyleW00t]

The tag v1.0.5.-rc.2 (note the extra period) is causing Dependabot to fail due to a Malformed version number, which causes all updates for this Action to fail entirely. It seems like this is the only tag like this, so I suspect it may have been a mistake.

Snippet from Dependabot log:

...
updater | 2023/03/31 01:40:08 ERROR <job_636476188> Error processing slsa-framework/slsa-verifier (ArgumentError)
updater | 2023/03/31 01:40:08 ERROR <job_636476188> Malformed version number string 1.0.5.-rc.2
...
updater | Dependabot encountered '1' error(s) during execution, please check the logs for more details.
updater | +----------------------------------------------+
updater | |        Dependencies failed to update         |
updater | +------------------------------+---------------+
updater | | slsa-framework/slsa-verifier | unknown_error |
updater | +------------------------------+---------------+

[ianlewis]

@asraa Is this just a typo? We don't need this for any tests or anything right?

[asraa]

This is really interesting! Yes, this was a typo, and the release was only needed to test a process.

If I delete the tag, will the issue go away? I'm surprised we hadn't encountered this before

[IAreKyleW00t]

@asraa - Yeah, definitely seemed a bit odd, which is why I reached out! I'm pretty sure removing (or renaming) the tag will fix the issue. It appears that Dependabot needs to check every tag (version) on a Repo to determine the update path for your current version.

[asraa]

Thank you for the info! I'll go ahead and delete all our RC tags, let me know if that'll fix it!

[IAreKyleW00t]

Yup, that fixed it right away! Thanks for the quick response and fix! :)

updater | +----------------------------------------------------------------+
updater | |              Changes to Dependabot Pull Requests               |
updater | +---------+------------------------------------------------------+
updater | | created | slsa-framework/slsa-verifier ( from 2.0.1 to 2.1.0 ) |
updater | +---------+------------------------------------------------------+