ci (refactor): split actions

Author: pythoninthegrass

.github/workflows/artifact.yml

@@ -0,0 +1,41 @@
+name: Attach artifact to release
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: write
+
+jobs:
+  attach-artifact:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: artifacts
+
+      - name: Upload Release Assets
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          release_tag="${{ github.event.release.tag_name }}"
+
+          # Get existing release assets
+          existing_assets=$(gh release view "$release_tag" --json assets --jq '.assets[].name')
+
+          # Upload new artifacts
+          for file in artifacts/*/*.zip; do
+            if [ -f "$file" ]; then
+              filename=$(basename "$file")
+              if ! echo "$existing_assets" | grep -q "$filename"; then
+                gh release upload "$release_tag" "$file" --clobber
+                echo "Uploaded $filename to release $release_tag"
+              else
+                echo "Skipped $filename (already exists in release $release_tag)"
+              fi
+            fi
+          done

.github/workflows/release-please.yml

@@ -1,21 +1,10 @@
 name: Release Please
 
-# TODO: revert branches and paths
 on:
   push:
-    # branches: ['main', 'master']
-    # paths:
-    #   - 'get_cert.py'
-    #   - 'get_cert.spec'
-    #   - 'requirements.txt'
-    #   - '*.md'
+    branches: ['main', 'master']
   pull_request:
     branches: ['main', 'master']
-    paths:
-      - 'get_cert.py'
-      - 'get_cert.spec'
-      - 'requirements.txt'
-      - '*.md'
 
 permissions:
   contents: write
@@ -32,42 +21,3 @@ jobs:
           token: ${{ secrets.RELEASE_PLEASE_TOKEN }}
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json
-
-      - uses: actions/checkout@v4
-        if: ${{ steps.release.outputs.releases_created }}
-
-      - name: Download and upload artifacts
-        if: ${{ steps.release.outputs.releases_created }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          if [ -z "${{ steps.release.outputs.tag_name }}" ]; then
-            echo "No tag name provided. Skipping artifact upload."
-            exit 0
-          fi
-
-          # Get the latest successful build artifacts
-          run_id=$(gh run list --workflow=build.yml --branch main --status completed --limit 1 --json databaseId --jq '.[0].databaseId')
-          if [ -z "$run_id" ]; then
-            echo "No successful build found. Skipping artifact upload."
-            exit 0
-          fi
-          gh run download $run_id
-
-          # Get existing release assets
-          existing_assets=$(gh release view "${{ steps.release.outputs.tag_name }}" --json assets --jq '.assets[].name' || echo "")
-
-          # Upload new artifacts
-          uploaded=false
-          for file in */*.zip; do
-            if [ -f "$file" ]; then
-              filename=$(basename "$file")
-              if ! echo "$existing_assets" | grep -q "$filename"; then
-                gh release upload "${{ steps.release.outputs.tag_name }}" "$file" --clobber
-                echo "Uploaded $filename to release"
-                uploaded=true
-              fi
-            fi
-          done
-
-          $uploaded || echo "No new artifacts were uploaded to the release."