workflow: run publish_build only on release

This job no longer handles nightly builds, so simplify the checks.

Bump download-artifact to v4 while at it.

Author: lifehackerhansol

.github/workflows/build.yml

@@ -64,16 +64,15 @@ jobs:
   publish_build:
     runs-on: ubuntu-latest
     name: Publish build
-    if: ${{ success() && !startsWith(github.ref, 'refs/pull') }}
+    if: ${{ success() && startsWith(github.ref, 'refs/tags') }}
     needs: build
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: build
           path: build
       - name: Upload to ${{ github.repository }} release
-        if: ${{ startsWith(github.ref, 'refs/tags') }}
         run: |
           ID=$(jq --raw-output '.release.id' $GITHUB_EVENT_PATH)