...

Author: sedmicha

.github/workflows/packages.yml

@@ -217,7 +217,8 @@ jobs:
         path: |
           build/pkg/rpm/rpmbuild/RPMS/
           build/pkg/rpm/rpmbuild/SRPMS/
-    - name: Publish RPM packages to GitHub releases
+
+    - name: Publish RPM packages to GitHub releases (latest)
       if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/ci-publish-packages-to-releases'
       env:
         GH_TOKEN: ${{ github.token }}
@@ -234,3 +235,30 @@ jobs:
           mv "$f" "$newf"
           gh release upload --clobber ci-latest "$newf"
         done
+
+    - name: Publish RPM packages to GitHub releases (stable)
+      if: github.ref == 'refs/heads/ci-release'
+      env:
+        GH_TOKEN: ${{ github.token }}
+        IMAGE_NAME: ${{ matrix.image }}
+      run: |
+        curl -sL "$(curl -sL "https://api.github.com/repos/cli/cli/releases" | grep _linux_amd64.tar.gz | grep https | head -n1 | cut -d'"' -f4)" -o gh.tar.gz \
+          && tar xzf gh.tar.gz \
+          && find gh*/ -name gh -exec mv {} /usr/local/bin/ \;
+
+        git config --global --add safe.directory "$PWD"
+        latest_tag="$(git tag | grep 'v[0-9]*\.[0-9]*\.[0-9]*' | sort -rn | head -n1)"
+        if [ ! -z "$latest_tag" ]; then
+          echo "could not find latest tag"
+          exit 1
+        fi
+        if ! gh release view "$latest_tag"; then
+          echo "could not find release for tag $latest_tag"
+          exit 1
+        fi
+
+        find build/ -iname '*.rpm' | while read -r f; do
+          newf="$IMAGE_NAME-$(basename "$f")"
+          mv "$f" "$newf"
+          gh release upload --clobber "$latest_tag" "$newf"
+        done