Fix/release create tag before verify (#403)

* fix(release): create missing app-v tag before release verification

Ensure reusable publish creates and pushes the expected app-v tag when absent,
then validates it points to source_ref. This prevents release records with tag_name
but no git refs/tags object, which previously broke Source code archives.

* fix(release): pin tauri publish to tagged release metadata

Pass tagName/releaseName/releaseDraft/prerelease to tauri-action in addition to
releaseId, so asset upload fallback remains bound to the expected app-v release
instead of creating untagged releases.

* chore(ci): align workflow action versions for release flow

Update github-script usage to v9 across release-related workflows and keep
the current tauri-action release binding changes in the same branch for testing.
This commit is contained in:
cucadmuh
2026-05-01 21:44:44 +03:00
committed by GitHub
parent dbc814da4c
commit 090d129283
4 changed files with 6 additions and 6 deletions
+1 -1
View File
@@ -72,7 +72,7 @@ jobs:
- name: push next - name: push next
run: git push --force-with-lease origin HEAD:next run: git push --force-with-lease origin HEAD:next
- name: dispatch Next Channel workflow - name: dispatch Next Channel workflow
uses: actions/github-script@v7 uses: actions/github-script@v9
env: env:
SOURCE_ONLY: ${{ inputs.source_only && 'true' || 'false' }} SOURCE_ONLY: ${{ inputs.source_only && 'true' || 'false' }}
with: with:
@@ -57,7 +57,7 @@ jobs:
- name: push release - name: push release
run: git push --force-with-lease origin HEAD:release run: git push --force-with-lease origin HEAD:release
- name: dispatch Release Channel workflow - name: dispatch Release Channel workflow
uses: actions/github-script@v7 uses: actions/github-script@v9
env: env:
SOURCE_ONLY: ${{ inputs.source_only && 'true' || 'false' }} SOURCE_ONLY: ${{ inputs.source_only && 'true' || 'false' }}
with: with:
@@ -148,7 +148,7 @@ jobs:
echo "$EOF_MARKER" >> "$GITHUB_OUTPUT" echo "$EOF_MARKER" >> "$GITHUB_OUTPUT"
- name: create or update release - name: create or update release
id: create_release id: create_release
uses: actions/github-script@v7 uses: actions/github-script@v9
env: env:
PACKAGE_VERSION: ${{ steps.get-version.outputs.version }} PACKAGE_VERSION: ${{ steps.get-version.outputs.version }}
RELEASE_TAG: ${{ steps.tag.outputs.value }} RELEASE_TAG: ${{ steps.tag.outputs.value }}
@@ -214,7 +214,7 @@ jobs:
exit 1 exit 1
fi fi
- name: verify release-tag binding - name: verify release-tag binding
uses: actions/github-script@v7 uses: actions/github-script@v9
env: env:
RELEASE_ID: ${{ steps.create_release.outputs.release_id }} RELEASE_ID: ${{ steps.create_release.outputs.release_id }}
EXPECTED_TAG: ${{ steps.tag.outputs.value }} EXPECTED_TAG: ${{ steps.tag.outputs.value }}
@@ -324,7 +324,7 @@ jobs:
mkdir -p ~/private_keys mkdir -p ~/private_keys
echo "${{ secrets.APPLE_API_KEY_B64 }}" | base64 --decode > ~/private_keys/AuthKey.p8 echo "${{ secrets.APPLE_API_KEY_B64 }}" | base64 --decode > ~/private_keys/AuthKey.p8
echo "APPLE_API_KEY_PATH=$HOME/private_keys/AuthKey.p8" >> "$GITHUB_ENV" echo "APPLE_API_KEY_PATH=$HOME/private_keys/AuthKey.p8" >> "$GITHUB_ENV"
- uses: tauri-apps/tauri-action@v0 - uses: tauri-apps/tauri-action@v1
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
VITE_LASTFM_API_KEY: ${{ secrets.VITE_LASTFM_API_KEY }} VITE_LASTFM_API_KEY: ${{ secrets.VITE_LASTFM_API_KEY }}
+1 -1
View File
@@ -32,7 +32,7 @@ jobs:
checks: read checks: read
steps: steps:
- name: validate required checks - name: validate required checks
uses: actions/github-script@v7 uses: actions/github-script@v9
env: env:
TARGET_BRANCH: ${{ inputs.branch || github.event.inputs.branch || 'main' }} TARGET_BRANCH: ${{ inputs.branch || github.event.inputs.branch || 'main' }}
REQUIRED_CONTEXTS: ${{ inputs.required_contexts || github.event.inputs.required_contexts || 'ci-ok|ci-main / ci-ok' }} REQUIRED_CONTEXTS: ${{ inputs.required_contexts || github.event.inputs.required_contexts || 'ci-ok|ci-main / ci-ok' }}