feat: add tagName input and checkout refs to checksum workflows

- Add tagName input parameter to source-checksums-reusable.yml and asset-checksums-reusable.yml
- Update tag resolution logic to prioritize tagName over other inputs
- Add checkout steps with proper ref handling for both workflows
- Ensure consistent behavior when called from release workflow with specific tags

Author: hrzlgnm

.github/workflows/asset-checksums-reusable.yml

@@ -4,12 +4,15 @@
 name: Create and publish checksums of release assets
 on:
   workflow_call:
-  workflow_dispatch:
     inputs:
+      tagName:
+        description: The tag name of release to publish for
+        type: string
+        required: false
       semver:
-        description: The semver of the release to publish for
+        description: The semver of release to publish for
         type: string
-        required: true
+        required: false
 
 permissions:
   contents: write
@@ -24,10 +27,14 @@ jobs:
       - name: 🏷️
         id: tag
         run: |
-          if [ -n "${{ github.event.release.name }}" ]; then
+          if [ -n "${{ inputs.tagName }}" ]; then
+            echo "tag=${{ inputs.tagName }}" >> $GITHUB_OUTPUT
+          elif [ -n "${{ github.event.release.name }}" ]; then
             echo "tag=${{ github.event.release.tag_name }}" >> $GITHUB_OUTPUT
-          else
+          elif [ -n "${{ github.event.inputs.semver }}" ]; then
             echo "tag=mdns-browser-v${{ github.event.inputs.semver }}" >> $GITHUB_OUTPUT
+          else
+            echo "No tag provided" && exit 1
           fi
 
   generate_checksums:
@@ -39,6 +46,12 @@ jobs:
       matrix:
         algorithm: [sha256]
     steps:
+      - name: 🔄 Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          ref: ${{ needs.tag.outputs.tag }}
+          fetch-depth: 1
+
       - name: 📥 assets
         uses: robinraju/release-downloader@daf26c55d821e836577a15f77d86ddc078948b05 # v1.12
         with:

.github/workflows/release.yml

@@ -157,7 +157,7 @@ jobs:
     uses: ./.github/workflows/source-checksums-reusable.yml
     secrets: inherit
     with:
-      semver: ${{ github.event_name == 'release' && github.event.release.tag_name || needs.version_management.outputs.version }}
+      tagName: ${{ github.event_name == 'release' && github.event.release.tag_name || format('mdns-browser-v{0}', needs.version_management.outputs.version) }}
 
   build_artifacts:
     needs: [version_management, create_prerelease, source_checksums]

.github/workflows/source-checksums-reusable.yml

@@ -4,12 +4,15 @@
 name: Create and publish source checksum
 on:
   workflow_call:
-  workflow_dispatch:
     inputs:
+      tagName:
+        description: The tag name of release to publish for
+        type: string
+        required: false
       semver:
-        description: The semver of the release to publish for
+        description: The semver of release to publish for
         type: string
-        required: true
+        required: false
 
 permissions:
   contents: write
@@ -24,10 +27,14 @@ jobs:
       - name: 🏷️
         id: tag
         run: |
-          if [ -n "${{ github.event.release.name }}" ]; then
+          if [ -n "${{ inputs.tagName }}" ]; then
+            echo "tag=${{ inputs.tagName }}" >> $GITHUB_OUTPUT
+          elif [ -n "${{ github.event.release.name }}" ]; then
             echo "tag=${{ github.event.release.tag_name }}" >> $GITHUB_OUTPUT
-          else
+          elif [ -n "${{ github.event.inputs.semver }}" ]; then
             echo "tag=mdns-browser-v${{ github.event.inputs.semver }}" >> $GITHUB_OUTPUT
+          else
+            echo "No tag provided" && exit 1
           fi
 
   generate_checksums:
@@ -39,6 +46,12 @@ jobs:
       matrix:
         algorithm: [sha256]
     steps:
+      - name: 🔄 Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          ref: ${{ needs.tag.outputs.tag }}
+          fetch-depth: 1
+
       - name: 📥🔢☑️
         run: |
           set -o errexit