From 49f16c231fada9c037e44939001a8effdde0fac2 Mon Sep 17 00:00:00 2001
From: Sanskar <sanskarin@outlook.in>
Date: Sat, 26 Sep 2026 10:01:36 +0000
Subject: [PATCH] fix(release): check out the tag, never a branch of the same
 name

The build jobs checked out the release by its short name. actions/checkout prefers a
branch over a tag with the same name, so with a v1.0.0 branch in the repository the
release would have built that branch instead of the tagged commit. Every checkout now uses
the full refs/tags/ reference.
---
 .github/workflows/release.yml | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e5474890..8d32683c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,9 +25,10 @@ jobs:
       tag: ${{ steps.version.outputs.tag }}
       version: ${{ steps.version.outputs.version }}
     steps:
+      # Full tag refs everywhere: a branch with the same name as the tag must not be built.
       - uses: actions/checkout@v7
         with:
-          ref: ${{ inputs.tag || github.ref }}
+          ref: ${{ inputs.tag && format('refs/tags/{0}', inputs.tag) || github.ref }}
       - id: version
         env:
           TAG: ${{ inputs.tag || github.ref_name }}
@@ -53,7 +54,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with:
-          ref: ${{ needs.prepare.outputs.tag }}
+          ref: refs/tags/${{ needs.prepare.outputs.tag }}
       - uses: actions/setup-node@v7
         with:
           node-version: 22
@@ -87,7 +88,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with:
-          ref: ${{ needs.prepare.outputs.tag }}
+          ref: refs/tags/${{ needs.prepare.outputs.tag }}
       # The binary embeds the web interface served by `repodna serve`.
       - uses: actions/download-artifact@v8
         with:
@@ -160,7 +161,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with:
-          ref: ${{ needs.prepare.outputs.tag }}
+          ref: refs/tags/${{ needs.prepare.outputs.tag }}
       - name: Install WebKitGTK
         if: runner.os == 'Linux'
         run: |
@@ -202,7 +203,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with:
-          ref: ${{ needs.prepare.outputs.tag }}
+          ref: refs/tags/${{ needs.prepare.outputs.tag }}
       - uses: actions/download-artifact@v8
         with:
           pattern: cli-*