fix(ci): sync Cargo.toml version before native binary build (#538)

* fix(ci): sync Cargo.toml version before native binary build

The build-native job ran in parallel with compute-version, so the Rust
crate was compiled with whatever stale version was in Cargo.toml rather
than the release version. This caused `codegraph info` to report
"binary built as 3.2.0" even on a 3.3.0 release.

Make build-native depend on compute-version and update Cargo.toml
before `cargo build` so env!("CARGO_PKG_VERSION") returns the correct
version.

* fix: guard against empty VERSION in Cargo.toml sync step (#538)

Add validation that $VERSION is non-empty before writing to Cargo.toml.
Prevents silently writing an empty version string if compute-version
output is missing.

* fix: scope awk version replacement to first occurrence only (#538)

Use an early-exit flag so only the first ^version = line in Cargo.toml
is replaced. Prevents silently corrupting the file if a second
version = line appears in a different TOML section.

Author: carlos-alm

.github/workflows/publish.yml

@@ -93,7 +93,7 @@ jobs:
           echo "npm_tag=$NPM_TAG" >> "$GITHUB_OUTPUT"
 
   build-native:
-    needs: preflight
+    needs: [preflight, compute-version]
     strategy:
       fail-fast: false
       matrix:
@@ -177,6 +177,16 @@ jobs:
           sudo ln -sf /lib/x86_64-linux-gnu/libgcc_s.so.1 "${GNU_LIB}/libgcc_s.so"
           sudo ln -sf /lib/x86_64-linux-gnu/libgcc_s.so.1 "${GNU_LIB}/libgcc_s.so.1"
 
+      - name: Sync Cargo.toml version
+        env:
+          VERSION: ${{ needs.compute-version.outputs.version }}
+        shell: bash
+        run: |
+          [[ -n "$VERSION" ]] || { echo "::error::VERSION is empty — compute-version output missing"; exit 1; }
+          CARGO="crates/codegraph-core/Cargo.toml"
+          awk -v v="$VERSION" '!done && /^version =/{$0="version = \""v"\""; done=1}1' "$CARGO" > "${CARGO}.tmp"
+          mv "${CARGO}.tmp" "$CARGO"
+
       - name: Install napi-rs CLI
         run: npm install -g @napi-rs/cli@3