From a173c468182161e51e96d7b8c615354c4ef47ced Mon Sep 17 00:00:00 2001
From: Dave Cramer <davecramer@gmail.com>
Date: Wed, 7 Oct 2026 10:44:29 -0400
Subject: [PATCH] ci: bump Win OpenSSL to 3.5.9

slproweb.com only hosts the latest patch release, and it has rotated from
3.5.8 to 3.5.9: Win32/Win64/Win64ARM OpenSSL-3_5_8.exe now return an
HTML error page instead of the installer, so the build-postgres and
build-postgres-arm jobs fail on any run that misses the cache.

Bump OPENSSL_VERSION to 3_5_9, which is available for all three targets.

Assisted-By: Claude
---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 7f5fa06d..eb21dc72 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -16,7 +16,7 @@ env:
 
   # PostgreSQL build from source.
   POSTGRESQL_SOURCE_TAG: 'REL_18_STABLE'
-  OPENSSL_VERSION: '3_5_8'
+  OPENSSL_VERSION: '3_5_9'
   WORKFLOW_VERSION_POSTGRESQL_ARM64: '1' # increment to invalidate the arm64 cache
   PKGCONFIGLITE_VERSION: '0.28-1'
   WINFLEXBISON_VERSION: '2.5.24'