add fix for nightly workflow

Signed-off-by: Soule BA <[email protected]>

.github/workflows/nightly_v21.yaml

@@ -11,20 +11,22 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          ssh-key: "${{ secrets.NIGHTLY_BUILD_KEY }}"
+          fetch-depth: 0
       - name: Push nightly tag
         shell: bash
         run: |
           git config --global user.name "Soule BA"
           git config --global user.email "[email protected]"
 
           # Get the latest release tag
-          git fetch 'refs/tags/*:refs/tags/*'
           DESCRIBE=$(git tag -l --sort=-v:refname | grep -v nightly | head -n 1)
           MAJOR_VERSION=$(echo $DESCRIBE | awk '{split($0,a,"."); print a[1]}')
           MINOR_VERSION=$(echo $DESCRIBE | awk '{split($0,a,"."); print a[2]}')
           PATCH_VERSION=$(echo $DESCRIBE | awk '{split($0,a,"."); print a[3]}')
           PATCH_NUMBER=$(echo $DESCRIBE | awk '{split($0,a,"."); print a[4]}')
-          TAG="${MAJOR_VERSION}.${MINOR_VERSION}.${PATCH_VERSION}
+          TAG="${MAJOR_VERSION}.${MINOR_VERSION}.${PATCH_VERSION}"
           if [[ "$PATCH_NUMBER" =~ ^[0-9]+$ ]]; then
             TAG="${TAG}.${PATCH_NUMBER}"
           fi

.github/workflows/release_v21.yaml

@@ -15,7 +15,7 @@ jobs:
         id: version
         shell: bash
         run: |
-          if [[ "{{  github.ref_name }}" == "*.nightly*" ]]; then
+          if [[ "${{  github.ref }}" == refs/tags/v*.nightly* ]]; then
             echo "nightly=true" >> $GITHUB_OUTPUT
           else
             echo "nightly=false" >> $GITHUB_OUTPUT
@@ -212,12 +212,14 @@ jobs:
       contents: write # needed to write releases
       id-token: write # needed for keyless signing
       packages: write # needed for ghcr access
-    needs: [sc-ghcr-provenance, kc-ghcr-provenance, hc-ghcr-provenance, irc-ghcr-provenance, iac-ghcr-provenance, nc-ghcr-provenance]
+    needs: [nightly-tag,sc-ghcr-provenance, kc-ghcr-provenance, hc-ghcr-provenance, irc-ghcr-provenance, iac-ghcr-provenance, nc-ghcr-provenance]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup Kustomize
         uses: fluxcd/pkg/actions/kustomize@main
+      - name: Setup yq
+        uses: fluxcd/pkg/actions/yq@main
       - name: install stgit
         shell: bash
         run: |
@@ -257,6 +259,8 @@ jobs:
           fi
           if [[ "${{ needs.nightly-tag.outputs.nightly }}" == "true" ]]; then
             VERSION=${VERSION}-nightly.$(date +%y%m%d%H%M%S)
+            # also patch .goreleaser.yml
+            yq -i '.release.make_latest = false' .goreleaser.yml
           else
             VERSION=${VERSION}.$(date +%y%m%d%H%M%S)
           fi
@@ -342,7 +346,7 @@ jobs:
 
   release-flux-manifests:
     runs-on: ubuntu-latest
-    needs: release-flux-cli
+    needs: [nightly-tag, release-flux-cli]
     permissions:
       id-token: write
       packages: write

.goreleaser.yml

@@ -50,14 +50,13 @@ sboms:
     documents:
       - "{{ .ProjectName }}_{{ .Version }}_sbom.spdx.json"
 release:
+  make_latest: true
   extra_files:
     - glob: output/crd-schemas.tar.gz
     - glob: output/manifests.tar.gz
     - glob: output/install.yaml
-
 changelog:
   skip: true
-
 checksum:
   extra_files:
     - glob: output/crd-schemas.tar.gz