Prepare v0.64.1 release

.github/workflows/post-merge.yaml

@@ -108,7 +108,7 @@ jobs:
 
   release-build-darwin:
     name: Release Build (darwin)
-    runs-on: macos-latest
+    runs-on: macos-14
     needs: generate
     steps:
       - name: Check out code
@@ -124,7 +124,9 @@ jobs:
           go-version: ${{ steps.go_version.outputs.go_version }}
 
       - name: Build Darwin
-        run: make ci-build-darwin ci-build-darwin-arm64-static
+        run: |
+          make ci-build-darwin GOARCH=amd64
+          make ci-build-darwin-arm64-static
         timeout-minutes: 30
         env:
           TELEMETRY_URL: ${{ secrets.TELEMETRY_URL }}

.github/workflows/post-tag.yaml

@@ -48,7 +48,7 @@ jobs:
 
   release-build-darwin:
     name: Release Build (darwin)
-    runs-on: macos-latest
+    runs-on: macos-14
     needs: generate
     steps:
       - name: Check out code
@@ -64,7 +64,9 @@ jobs:
           go-version: ${{ steps.go_version.outputs.go_version }}
 
       - name: Build Darwin
-        run: make ci-build-darwin ci-build-darwin-arm64-static
+        run: |
+          make ci-build-darwin GOARCH=amd64
+          make ci-build-darwin-arm64-static
         timeout-minutes: 30
         env:
           TELEMETRY_URL: ${{ secrets.TELEMETRY_URL }}

.github/workflows/pull-request.yaml

@@ -55,13 +55,14 @@ jobs:
             run: ubuntu-22.04
             targets: ci-go-ci-build-windows
             arch: amd64
-          # Note(philipc): The underlying make targets also build arm64_static,
-          # but the downstream targets only want the amd64 binaries, so amd64 is
-          # the artifact name we upload the darwin target to.
           - os: darwin
-            run: macos-latest
-            targets: ci-build-darwin ci-build-darwin-arm64-static
+            run: macos-13
+            targets: ci-build-darwin
             arch: amd64
+          - os: darwin
+            run: macos-14
+            targets: ci-build-darwin-arm64-static
+            arch: arm64
     steps:
       - name: Check out code
         uses: actions/checkout@v4
@@ -112,7 +113,7 @@ jobs:
           - os: linux
             run: ubuntu-22.04
           - os: darwin
-            run: macos-latest
+            run: macos-14
     steps:
       - name: Check out code
         uses: actions/checkout@v4
@@ -282,9 +283,14 @@ jobs:
             arch: amd64
             wasm: disabled
           - os: darwin
-            run: macos-latest
+            run: macos-13
             exec: opa_darwin_amd64
             arch: amd64
+          - os: darwin
+            run: macos-14
+            exec: opa_darwin_arm64_static
+            arch: arm64
+            wasm: disabled
           - os: windows
             run: windows-latest
             exec: opa_windows_amd64.exe
@@ -314,7 +320,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-22.04, macos-latest]
+        os: [ubuntu-22.04, macos-14]
         version: ["1.20"]
     steps:
       - uses: actions/checkout@v4

CHANGELOG.md

@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file. This
 project adheres to [Semantic Versioning](http://semver.org/).
 
+## 0.64.1
+
+This is a bug fix release addressing the following issues:
+
+- ci: Pin GitHub Actions macos runner version. The architecture of the GitHub Actions Runner `macos-latest` was changed from `amd64` to `arm64` and as a result `darwin/amd64` binary wasn't released ([#6720](https://github.com/open-policy-agent/opa/issues/6720)) authored by @suzuki-shunsuke
+- plugins/discovery: Update comparison logic used in the discovery plugin for handling overrides. This fixes a panic that resulted from the comparison of uncomparable types ([#6723](https://github.com/open-policy-agent/opa/pull/6723)) authored by @ashutosh-narkar
+
 ## 0.64.0
 
 > **_NOTES:_**