From 5f94a3caac79e58de23497585f0c8935dd332f73 Mon Sep 17 00:00:00 2001 From: Mathias Beaulieu-Duncan Date: Mon, 2 Feb 2026 09:50:32 -0500 Subject: [PATCH] Use unauthenticated HTTP status check for release existence Align with docker-flutter-sdk pattern: check release existence via HTTP status code (no auth needed), reserve GITEA_TOKEN for release creation only. Co-Authored-By: Claude Opus 4.5 --- .gitea/workflows/update-check.yaml | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/.gitea/workflows/update-check.yaml b/.gitea/workflows/update-check.yaml index 0408c95..fa12328 100644 --- a/.gitea/workflows/update-check.yaml +++ b/.gitea/workflows/update-check.yaml @@ -85,13 +85,11 @@ jobs: echo "Latest Flutter stable: $LATEST" echo "new_version=$LATEST" >> "$GITHUB_OUTPUT" - # Check if a release with this tag already exists (use -sS, not -f, so 404 doesn't fail) - EXISTING=$(curl -sS \ - -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \ - "${{ github.server_url }}/api/v1/repos/${{ github.repository }}/releases/tags/v${LATEST}" \ - | jq -r '.tag_name // empty') + # Check if a release with this tag already exists (unauthenticated, HTTP status only) + STATUS=$(curl -s -o /dev/null -w "%{http_code}" \ + "${{ github.server_url }}/api/v1/repos/${{ github.repository }}/releases/tags/v${LATEST}") - if [ -n "$EXISTING" ]; then + if [ "$STATUS" = "200" ]; then echo "Release v${LATEST} already exists, skipping" echo "has_new=false" >> "$GITHUB_OUTPUT" else