From ceb4c7b21187355d7010a4bd4e485aa26c368844 Mon Sep 17 00:00:00 2001
From: xscriptor <preciado.oscar.osorio@gmail.com>
Date: Sun, 26 Apr 2026 09:07:47 +0200
Subject: [PATCH] ci: fix release pipeline and sync Cargo.lock for --locked
 builds

---
 .github/workflows/release.yml | 14 +++++++-------
 Cargo.lock                    |  2 +-
 docs/RELEASE_WORKFLOW.md      | 14 +++++++++-----
 3 files changed, 17 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9bc089c..ead9b78 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install cargo-deb
         run: cargo install cargo-deb --locked
       - name: Build
@@ -60,7 +60,7 @@ jobs:
           curl https://sh.rustup.rs -sSf | sh -s -- -y --profile minimal
           echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install cargo-generate-rpm
         run: cargo install cargo-generate-rpm --locked
       - name: Build
@@ -94,7 +94,7 @@ jobs:
           curl https://sh.rustup.rs -sSf | sh -s -- -y --profile minimal
           echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Build
         run: cargo build --release --locked
       - name: Package (.pkg.tar.zst)
@@ -130,7 +130,7 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Build
         run: cargo build --release --locked
       - name: Package (.exe)
@@ -153,7 +153,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Build
         run: cargo build --release --locked
       - name: Package (.dmg)
@@ -193,7 +193,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout repository metadata
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Download build artifacts
         uses: actions/download-artifact@v5
         with:
@@ -202,7 +202,7 @@ jobs:
           merge-multiple: true
       - name: Generate GitHub App token
         id: app_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.RELEASE_GH_APP_ID }}
           private-key: ${{ secrets.RELEASE_GH_APP_PRIVATE_KEY }}
diff --git a/Cargo.lock b/Cargo.lock
index 73fa98e..9976b50 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1043,7 +1043,7 @@ dependencies = [
 
 [[package]]
 name = "gitnapse"
-version = "0.1.0"
+version = "0.1.2"
 dependencies = [
  "anyhow",
  "base64",
diff --git a/docs/RELEASE_WORKFLOW.md b/docs/RELEASE_WORKFLOW.md
index dedf5ac..39b79b4 100644
--- a/docs/RELEASE_WORKFLOW.md
+++ b/docs/RELEASE_WORKFLOW.md
@@ -27,17 +27,21 @@
 
 <h2 id="artifacts" align="center">Build Artifacts</h2>
 <ul>
-  <li><code>gitnapse-&lt;tag&gt;-linux-ubuntu-x86_64.tar.gz</code></li>
-  <li><code>gitnapse-&lt;tag&gt;-linux-arch-x86_64.tar.gz</code></li>
-  <li><code>gitnapse-&lt;tag&gt;-linux-fedora-x86_64.tar.gz</code></li>
-  <li><code>gitnapse-&lt;tag&gt;-windows-x86_64.zip</code></li>
-  <li><code>gitnapse-&lt;tag&gt;-macos-&lt;arch&gt;.tar.gz</code></li>
+  <li><code>gitnapse-&lt;tag&gt;-linux-ubuntu-amd64.deb</code></li>
+  <li><code>gitnapse-&lt;tag&gt;-linux-arch-x86_64.pkg.tar.zst</code></li>
+  <li><code>gitnapse-&lt;tag&gt;-linux-fedora-x86_64.rpm</code></li>
+  <li><code>gitnapse-&lt;tag&gt;-windows-x86_64.exe</code></li>
+  <li><code>gitnapse-&lt;tag&gt;-macos-&lt;arch&gt;.dmg</code></li>
 </ul>
 
 <h2 id="commands" align="center">Versioning Commands</h2>
 <p>Create and publish a new version tag:</p>
 <pre><code class="language-bash">git checkout main
 git pull --ff-only
+# if Cargo.toml version changed, refresh lockfile and commit it
+cargo check
+git add Cargo.lock
+git commit -m "chore: sync Cargo.lock"
 git tag -a v1.0.0 -m "GitNapse v1.0.0"
 git push origin v1.0.0
 </code></pre>