Always create new release, pre-release returns sha to avoid race cond…

.github/workflows/nightly-release.yml

@@ -68,11 +68,12 @@ jobs:
                           archive_cmd: 'zip -j "${ARCHIVE_PATH}" "${RELEASE_DIR}"/*',
                       }
         steps:
-            - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
-
+            - uses: actions/checkout@v4
+              with:
+                  # Do not checkout 'main'. Checkout the exact SHA prep-release used.
+                  ref: ${{ needs.prep-release.outputs.release_sha }}
             - name: prep-release
               env:
-                  RAG_DB_PATH: "${RELEASE_DIR}/devops-rag.db"
                   BIN_FILE: "${{ matrix.platform.bin_file }}"
               run: |
                   mkdir -p "${RELEASE_DIR}"

.github/workflows/prep-release.yaml

@@ -15,46 +15,45 @@
 name: Prepare Release
 
 on:
-    workflow_call:
-        inputs:
-            release:
-                required: true
-                type: string
-                default: dev
-    workflow_dispatch: # Allows manual triggering of the workflow
-
-env:
-    RELEASE: dev
-    GH_TOKEN: ${{ github.token }}
+  workflow_call:
+    inputs:
+      release:
+        required: true
+        type: string
+        default: dev
+    outputs:
+      release_sha:
+        description: "The SHA that was tagged"
+        value: ${{ jobs.prep-release.outputs.sha }}
 
 jobs:
-    prep-release:
-        runs-on: ubuntu-latest
-
-        steps:
-            - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
-
-            - name: Prepare for a new release
-              id: prep
-              run: |
-                  export RELEASE="${{ env.RELEASE }}"
-                  if [[ "${{ inputs.release }}" != "" ]]; then
-                    echo "Updating to RELEASE to ${{ inputs.release }}"
-                    RELEASE="${{ inputs.release }}"
-                  fi
-                  echo "RELEASE=${RELEASE}" >> "$GITHUB_OUTPUT"
-
-                  echo "Preparing for \"${RELEASE}\" release"
-                  git config --local user.email "action@github.com"
-                  git config --local user.name "GitHub Action"
-                  git tag -fa -m "${RELEASE} release" "${RELEASE}"
-                  #git push --force origin "${RELEASE}"
-                  echo "Release tag created \"${RELEASE}\""
-
-                  # check of a release already exists
-                  if [[ $(gh release view "${RELEASE}") ]]; then
-                    echo "Release already exists!"
-                  else
-                    echo "Creating new release ${RELEASE}"
-                    gh release create --prerelease ${RELEASE}
-                  fi
+  prep-release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    # ADD THIS SECTION
+    outputs:
+      sha: ${{ steps.get_sha.outputs.sha }} 
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: main
+
+      # ADD THIS STEP
+      - name: Get Commit SHA
+        id: get_sha
+        run: echo "sha=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
+
+      - name: Update Rolling Release
+        env:
+          RELEASE_TAG: ${{ inputs.release || env.RELEASE }}
+        run: |
+          # ... (Same deletion logic as before) ...
+
+          # ... (Same creation logic) ...
+          gh release create "$RELEASE_TAG" \
+            --prerelease \
+            --target "${{ steps.get_sha.outputs.sha }}" \
+            --title "$RELEASE_TAG build" \
+            --generate-notes