fix: preserve contract artifact permissions (#23174)

spypsy · web-flow · commit 2a4793f6a6c4 · 2026-05-12T14:50:09.000+01:00
- Preserve existing JSON file mode when stamping Aztec versions into
Noir contract artifacts.
- Prevent release images from containing root-only-readable account
artifacts used by Spartan deploy jobs.
diff --git a/noir-projects/noir-contracts/bootstrap.sh b/noir-projects/noir-contracts/bootstrap.sh
@@ -103,7 +103,8 @@ function stamp_aztec_version {
   semver check "$REF_NAME" 2>/dev/null && version="${REF_NAME#v}"
   local tmp=$(mktemp)
   jq --arg v "$version" '.aztec_version = $v' "$json_path" > "$tmp"
-  mv "$tmp" "$json_path"
+  cat "$tmp" > "$json_path"
+  rm "$tmp"
 }
 export -f stamp_aztec_version
 

Original file line number	Diff line number	Diff line change
`@@ -103,7 +103,8 @@ function stamp_aztec_version {`
`103`	`103`	`semver check "$REF_NAME" 2>/dev/null && version="${REF_NAME#v}"`
`104`	`104`	`local tmp=$(mktemp)`
`105`	`105`	`jq --arg v "$version" '.aztec_version = $v' "$json_path" > "$tmp"`
`106`		`- mv "$tmp" "$json_path"`
	`106`	`+ cat "$tmp" > "$json_path"`
	`107`	`+ rm "$tmp"`
`107`	`108`	`}`
`108`	`109`	`export -f stamp_aztec_version`
`109`	`110`