fix(ci): make release creation and tag pushing idempotent

Made-with: Cursor

Author: Hongwei-MB

.github/workflows/ci.yml

@@ -826,31 +826,40 @@ jobs:
           SHA="${{ needs.version.outputs.sha }}"
 
           git fetch --tags --force
-          if git rev-parse "$TAG" >/dev/null 2>&1; then
-            echo "::error::Tag $TAG already exists locally"
-            exit 1
-          fi
           if git ls-remote --tags origin "refs/tags/$TAG" | grep -q "$TAG"; then
-            echo "::error::Tag $TAG already exists on remote"
-            exit 1
+            REMOTE_SHA=$(git ls-remote --tags origin "refs/tags/$TAG^{}" | awk '{print $1}')
+            if [ -z "$REMOTE_SHA" ]; then
+              REMOTE_SHA=$(git ls-remote --tags origin "refs/tags/$TAG" | awk '{print $1}')
+            fi
+            
+            if [ "$REMOTE_SHA" == "$SHA" ]; then
+              echo "Tag $TAG already exists and points to current SHA. Skipping tag push."
+            else
+              echo "::error::Tag $TAG already exists on remote but points to a different SHA ($REMOTE_SHA != $SHA)"
+              exit 1
+            fi
+          else
+            if git rev-parse "$TAG" >/dev/null 2>&1; then
+              echo "::error::Tag $TAG already exists locally but not on remote"
+              exit 1
+            fi
+            git tag "$TAG" "$SHA"
+            git push origin "$TAG"
+            echo "Created and pushed tag $TAG at $SHA"
           fi
 
-          git tag "$TAG" "$SHA"
-          git push origin "$TAG"
-          echo "Created and pushed tag $TAG at $SHA"
-
       - name: Create GitHub Release
         shell: bash
         env:
-          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+          GH_TOKEN: ${{ github.token }}
         run: |
           TAG="${{ needs.version.outputs.tag }}"
           RELEASE_NAME="Agibuild.Fulora $TAG"
           VERSION_SUFFIX="${{ needs.version.outputs.version_suffix }}"
 
           if gh release view "$TAG" >/dev/null 2>&1; then
-            echo "::error::Release already exists for tag $TAG"
-            exit 1
+            echo "Release for tag $TAG already exists. Assuming success."
+            exit 0
           fi
 
           PRERELEASE_FLAG=""