fix: Release workflow ⚓

.github/workflows/release.yml

@@ -41,11 +41,20 @@ jobs:
         run: |
           git config user.name 'githooks-bot'
           git config user.email '[email protected]'
+          git fetch origin "$TRIGGER_TAG"
+
+          [ "$(git cat-file -t "$TRIGGER_TAG")" = "tag" ] || {
+            echo "Tag '$TRIGGER_TAG' is not an annotated tag."
+            git cat-file -t "$TRIGGER_TAG"
+            git --version
+            exit 1
+          }
 
           # Gets the message on the annotated commit:
           deref() { git for-each-ref "refs/tags/$TRIGGER_TAG" --format="%($1)" ; };
+
           # Creates a new tag with the same message, including trailing headers.
-          git tag "$RELEASE_TAG" -a -m "$(deref contents)"
+          git tag -a -m "$(deref contents)" "$RELEASE_TAG"
           git tag "githooks/$RELEASE_TAG"
 
       - name: Define Release Branch
@@ -57,25 +66,35 @@ jobs:
           RELEASE_BRANCH="main"
           RELEASE_VERSION="${RELEASE_TAG##v}"
 
-          regex="^Release-Branch:\s+(.*)$"
+          echo "Get release branch on tag '$RELEASE_TAG'."
+
           # Gets the message on the annotated commit:
           deref() {
             git for-each-ref "refs/tags/$RELEASE_TAG" --format="%($1)" ;
           };
 
+          git show -s --format="" $RELEASE_TAG
+          deref contents
+
+          regex="^Release-Branch:\s+(.*)$"
           if deref contents | grep -qE "$regex"; then
             RELEASE_BRANCH=$(deref contents | grep -E "$regex" |
                      sed -E "s/$regex/\1/") || {
               echo "Release-Branch trailer is wrong."
               exit 1
             }
+            [ -n "$RELEASE_BRANCH" ] || {
+              echo "Release-Branch trailer is empty."
+              exit 1
+            }
           fi
+
           # Fetch the branch.
           git fetch --depth 50 origin "$RELEASE_BRANCH"
 
           # Check if its reachable.
           [ -n "$(git rev-list --first-parent \
-                    --ancestry-path
+                    --ancestry-path \
                     "$RELEASE_TAG^..origin/$RELEASE_BRANCH")" ] || {
             echo "Tag is not reachable from '$RELEASE_BRANCH' (--first-parent) !" >&2
             exit 1

nix/pkgs/version.json

@@ -1 +1,3 @@
-{ "version": "3.0.0" }
+{
+  "version": "3.0.0-rc1"
+}

scripts/release.sh

@@ -34,7 +34,7 @@ function commit_version_file() {
     jq ".version |= \"$version\"" nix/pkgs/version.json >"$temp"
     mv "$temp" nix/pkgs/version.json
 
-    if git diff --quiet --exit-code; then
+    if ! git diff --quiet --exit-code; then
         git add nix/pkgs/version.json
         git commit -m "np: Update version to '$version'"
     fi