Pin the version of ferrarimarco/github-changelog-generator to prevent the CI from hanging

[atosatto]

See github-changelog-generator/github-changelog-generator#663.

[paulfantom]

Sorry, I forgot about this repo. Most of others already use pinned version.

This is a problem caused by @ferrarimarco, since he pinned latest version to unstable (pre-)release. I am considering forking that repo to control pipeline and not have this issue again.

[atosatto]

Yeah, indeed it was just the latest tag the problem.
Nevermind, it should be fixed now.

[ferrarimarco]

Hi all.

The latest tag marks the latest Gem release in our case.

Sorry you discovered the fact (via the hard way :) that in production you should avoid the latest tag and pin a specific version. 👍

[paulfantom]

@ferrarimarco actually that's a matter of balancing your time and your trust in someone else release and upgrade process. For security reasons you should always opt for latest version of the software. However this can cause some stability issues, which could be solved by spending some of your time. Classic chicken and an egg problem 😄
On the other hand there are projects like linux kernel where breaking backwards compatibility is punished (fortunately not by death, but only by angry email from Linus 😄) and you can update your system without much testing before.

As for me I have a lot of trust in software I use for personal projects (hence latest tag), until I am proven otherwise.