Fix release workflow

Author: arsenyinfo

.github/workflows/release.yml

@@ -16,6 +16,11 @@ on:
         required: false
         type: string
         default: ""
+      mark_as_latest:
+        description: "Mark this release as latest"
+        required: false
+        type: boolean
+        default: true
 
 permissions:
   contents: write
@@ -75,24 +80,25 @@ jobs:
           echo "Found CI run: $RUN_ID"
           echo "run_id=$RUN_ID" >> $GITHUB_OUTPUT
 
-      - name: Create and push tag
+      - name: Verify commit for tagging
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
-          NOTES="${{ inputs.release_notes }}"
-          if [ -z "$NOTES" ]; then
-            NOTES="Release ${{ inputs.version }}"
-          fi
-
-          git tag -a "${{ inputs.version }}" "${{ inputs.commit_sha }}" -m "$NOTES"
-          git push origin "${{ inputs.version }}"
+          # Verify commit exists and is in the repository
+          git rev-parse --verify "${{ inputs.commit_sha }}"
+          echo "Commit ${{ inputs.commit_sha }} verified for release"
 
   create-release:
     name: Create GitHub Release
     runs-on: ubuntu-latest
     needs: validate-and-tag
     steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
       - name: Download Linux artifact
         uses: actions/download-artifact@v4
         with:
@@ -128,22 +134,43 @@ jobs:
 
           CI_URL="https://github.com/${{ github.repository }}/actions/runs/${{ needs.validate-and-tag.outputs.run_id }}"
 
+          # Generate checksums
+          cd release
+          LINUX_CHECKSUM=$(sha256sum dabgent_mcp-linux-x86_64 | awk '{print $1}')
+          MACOS_CHECKSUM=$(sha256sum dabgent_mcp-macos-arm64 | awk '{print $1}')
+          cd ..
+
           cat > release_notes.md <<EOF
           $NOTES
 
+          ## SHA256 Checksums
+          \`\`\`
+          $LINUX_CHECKSUM  dabgent_mcp-linux-x86_64
+          $MACOS_CHECKSUM  dabgent_mcp-macos-arm64
+          \`\`\`
+
           ---
-          **Build Verification:**
           - Built from commit: \`${{ inputs.commit_sha }}\`
           - CI Run: $CI_URL
-          - Artifacts can be verified against the CI build
           EOF
 
           gh release create "${{ inputs.version }}" \
             --repo "${{ github.repository }}" \
             --title "${{ inputs.version }}" \
             --notes-file release_notes.md \
+            --target "${{ inputs.commit_sha }}" \
             release/*
 
+      - name: Mark as latest release
+        if: ${{ inputs.mark_as_latest }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          # Mark this release as the latest
+          gh release edit "${{ inputs.version }}" \
+            --repo "${{ github.repository }}" \
+            --latest
+
       - name: Output release URL
         run: |
           echo "Release created successfully!"