From ce234506ba4274fb90606b13e1ff9624a8c5f505 Mon Sep 17 00:00:00 2001
From: Nathan Gillett <nathan@intentproof.io>
Date: Sat, 30 May 2026 18:52:08 -0500
Subject: [PATCH] Fix spec release upload without git checkout

Checkout the tag ref and pass --repo to gh so the publish
job can create and upload the v1.0.0 GitHub Release.
---
 .github/workflows/release-spec.yml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-spec.yml b/.github/workflows/release-spec.yml
index ab2e03d..3e70c68 100644
--- a/.github/workflows/release-spec.yml
+++ b/.github/workflows/release-spec.yml
@@ -223,6 +223,11 @@ jobs:
     permissions:
       contents: write
     steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.ref }}
+          fetch-depth: 0
+
       - uses: actions/download-artifact@v8
         with:
           name: spec-integrity-manifest
@@ -241,12 +246,13 @@ jobs:
       - name: Upload artifacts to GitHub Release
         env:
           GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
           RELEASE_TAG: ${{ github.ref_name }}
         run: |
           set -euo pipefail
           mapfile -t files < <(find release-artifacts -type f | sort)
           test "${#files[@]}" -gt 0
-          if ! gh release view "$RELEASE_TAG" >/dev/null 2>&1; then
-            gh release create "$RELEASE_TAG" --generate-notes
+          if ! gh release view "$RELEASE_TAG" --repo "$GH_REPO" >/dev/null 2>&1; then
+            gh release create "$RELEASE_TAG" --repo "$GH_REPO" --generate-notes
           fi
-          gh release upload "$RELEASE_TAG" "${files[@]}" --clobber
+          gh release upload "$RELEASE_TAG" --repo "$GH_REPO" "${files[@]}" --clobber