fix/release-pipeline-python (#8)

Reviewed-on: #8

.woodpecker/release.yaml

@@ -17,8 +17,8 @@ steps:
   - name: release
     image: git.unkin.net/unkin/almalinux9-base:20260325
     environment:
-      DRONECI_PASSWORD:
+      RELEASER_TOKEN:
-        from_secret: DRONECI_PASSWORD
+        from_secret: RELEASER_TOKEN
     commands:
       - |
         PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
@@ -28,13 +28,20 @@ steps:
           NOTES=$(git log --merges --pretty=format:"- %s")
         fi
         BODY=$(printf '%s' "$NOTES" | sed 's/"/\\"/g; s/$/\\n/' | tr -d '\n')
-        RELEASE_ID=$(curl -sf -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases" \
+        GET_RESPONSE=$(curl -sk "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/tags/${CI_COMMIT_TAG}")
-          -u "droneci:$DRONECI_PASSWORD" \
+        echo "GET response: ${GET_RESPONSE}"
+        RELEASE_ID=$(printf '%s' "${GET_RESPONSE}" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
+        if [ -z "$RELEASE_ID" ]; then
+          echo "ERROR: failed to find release for tag ${CI_COMMIT_TAG}" >&2
+          exit 1
+        fi
+        echo "Release ID: ${RELEASE_ID}"
+        curl -sk -X PATCH "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}" \
+          -H "Authorization: token ${RELEASER_TOKEN}" \
           -H "Content-Type: application/json" \
-          -d "{\"tag_name\":\"${CI_COMMIT_TAG}\",\"name\":\"${CI_COMMIT_TAG}\",\"body\":\"${BODY}\"}" \
+          -d "{\"body\":\"${BODY}\"}"
-          | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
+        curl -sk -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}/assets" \
-        curl -sf -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}/assets" \
+          -H "Authorization: token ${RELEASER_TOKEN}" \
-          -u "droneci:$DRONECI_PASSWORD" \
           -F "attachment=@node-lookup"
     backend_options:
       kubernetes: