Resolve annotated tags to the commit instead of the tag object

Author: aidangarske

.github/actions/setup-wolfssl/action.yml

@@ -35,8 +35,12 @@ runs:
         if [[ "$ref" =~ ^[0-9a-f]{40}$ ]]; then
           sha="$ref"
         else
-          sha=$(git ls-remote https://github.com/wolfSSL/wolfssl.git "$ref" "refs/tags/$ref^{}" \
-                | head -n1 | cut -f1)
+          # An annotated tag resolves to the tag object, not the commit, so ask
+          # for the peeled ref first and fall back for branches.
+          sha=$(git ls-remote https://github.com/wolfSSL/wolfssl.git \
+                "refs/tags/$ref^{}" | cut -f1)
+          [ -n "$sha" ] || sha=$(git ls-remote \
+                https://github.com/wolfSSL/wolfssl.git "$ref" | head -n1 | cut -f1)
         fi
         [ -n "$sha" ] || { echo "could not resolve wolfSSL ref '$ref'"; exit 1; }
         echo "sha=$sha" >> "$GITHUB_OUTPUT"