From aa485a7324f2a5c1c89686ac1ba7edcfea5fa55d Mon Sep 17 00:00:00 2001
From: patryk4815 <patryk.sondej@grupawp.pl>
Date: Mon, 1 Dec 2025 01:44:39 +0100
Subject: [PATCH] Refactor gitlab-ci release (#3452)

---
 .github/workflows/releases.yml | 49 ++++++++++++++++++----------------
 1 file changed, 26 insertions(+), 23 deletions(-)

diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
index 7570d8243..9bcbbc060 100644
--- a/.github/workflows/releases.yml
+++ b/.github/workflows/releases.yml
@@ -25,7 +25,9 @@ jobs:
           pwndbg-lldb-cross-loong64-tarball,
         ]
     runs-on: ubuntu-24.04-arm  # aarch64-linux
-    timeout-minutes: 360
+    timeout-minutes: 60
+    permissions:
+      contents: write  # IMPORTANT: this permission is mandatory for github-release upload
     steps:
     - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9  # @v3
     - uses: cachix/install-nix-action@08dcb3a5e62fa31e2da3d490afc4176ef55ecd72  # @v30
@@ -35,19 +37,18 @@ jobs:
     - name: build ${{ matrix.attribute }}
       run: nix build '.#${{ matrix.attribute }}' --accept-flake-config -o dist-tarball
 
+    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # @v4
+      with:
+        name: ${{ matrix.os }}_${{ matrix.attribute }}
+        retention-days: 90
+        path: ./dist-tarball/*
+
     - name: release
       uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # @v1
       with:
         files: |
           ./dist-tarball/*
         draft: true
-        token: ${{ secrets.TOKEN }}
-
-    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # @v4
-      with:
-        name: ${{ matrix.os }}_${{ matrix.attribute }}
-        retention-days: 90
-        path: ./dist-tarball/*
 
   releases-linux:
     strategy:
@@ -58,12 +59,12 @@ jobs:
           ubuntu-24.04-arm,  # aarch64-linux
         ]
         attribute: [
-          pwndbg-lldb-portable-tarball,
           pwndbg-gdb-portable-tarball,
           pwndbg-gdb-portable-rpm,
           pwndbg-gdb-portable-deb,
           pwndbg-gdb-portable-apk,
           pwndbg-gdb-portable-archlinux,
+          pwndbg-lldb-portable-tarball,
           pwndbg-lldb-portable-rpm,
           pwndbg-lldb-portable-deb,
           pwndbg-lldb-portable-apk,
@@ -71,6 +72,8 @@ jobs:
         ]
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
+    permissions:
+      contents: write  # IMPORTANT: this permission is mandatory for github-release upload
     steps:
     - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9  # @v3
     - uses: cachix/install-nix-action@08dcb3a5e62fa31e2da3d490afc4176ef55ecd72  # @v30
@@ -80,19 +83,18 @@ jobs:
     - name: build ${{ matrix.attribute }}
       run: nix build '.#${{ matrix.attribute }}' --accept-flake-config -o dist-tarball
 
+    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # @v4
+      with:
+        name: ${{ matrix.os }}_${{ matrix.attribute }}
+        retention-days: 90
+        path: ./dist-tarball/*
+
     - name: release
       uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # @v1
       with:
         files: |
           ./dist-tarball/*
         draft: true
-        token: ${{ secrets.TOKEN }}
-
-    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # @v4
-      with:
-        name: ${{ matrix.os }}_${{ matrix.attribute }}
-        retention-days: 90
-        path: ./dist-tarball/*
 
   releases-macos:
     strategy:
@@ -108,6 +110,8 @@ jobs:
         ]
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
+    permissions:
+      contents: write  # IMPORTANT: this permission is mandatory for github-release upload
     steps:
     - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9  # @v3
     - uses: cachix/install-nix-action@08dcb3a5e62fa31e2da3d490afc4176ef55ecd72  # @v30
@@ -117,16 +121,15 @@ jobs:
     - name: build ${{ matrix.attribute }}
       run: nix build '.#${{ matrix.attribute }}' --accept-flake-config -o dist-tarball
 
+    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # @v4
+      with:
+        name: ${{ matrix.os }}_${{ matrix.attribute }}
+        retention-days: 90
+        path: ./dist-tarball/*
+
     - name: release
       uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # @v1
       with:
         files: |
           ./dist-tarball/*
         draft: true
-        token: ${{ secrets.TOKEN }}
-
-    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # @v4
-      with:
-        name: ${{ matrix.os }}_${{ matrix.attribute }}
-        retention-days: 90
-        path: ./dist-tarball/*