From 568fe311f8668cbc2ee3fcc6e65ab3184682b869 Mon Sep 17 00:00:00 2001
From: "Alex H. Raber" <alexhraber@gmail.com>
Date: Fri, 10 Jul 2026 23:45:34 -0700
Subject: [PATCH] fix(ci): download release assets from release_build step
 before calling release.sh
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The release step gets a fresh workspace — neither builddeck,
builddeck.sha256, nor builddeck.tag survive from the previous step.
Download all three from --step release_build before invoking
release.sh so the GitHub release has real assets to upload.

Same fix for pipeline.release.yml: download from --step build.
---
 .buildkite/pipeline.release.yml | 5 ++++-
 .buildkite/pipeline.yml         | 2 ++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.buildkite/pipeline.release.yml b/.buildkite/pipeline.release.yml
index 34eed98..a78a7f2 100644
--- a/.buildkite/pipeline.release.yml
+++ b/.buildkite/pipeline.release.yml
@@ -19,6 +19,9 @@ steps:
   - label: ":rocket: GitHub Release"
     key: release
     depends_on: build
-    command: .buildkite/release.sh "${BUILDKITE_TAG}"
+    command: |
+      buildkite-agent artifact download builddeck . --step build
+      buildkite-agent artifact download builddeck.sha256 . --step build
+      .buildkite/release.sh "${BUILDKITE_TAG}"
     secrets:
       - GITHUB_TOKEN
diff --git a/.buildkite/pipeline.yml b/.buildkite/pipeline.yml
index 4f3220c..ef097ba 100644
--- a/.buildkite/pipeline.yml
+++ b/.buildkite/pipeline.yml
@@ -117,6 +117,8 @@ steps:
     command: |
       if buildkite-agent artifact download builddeck.tag . --step release_build 2>/dev/null && [[ -s builddeck.tag ]]; then
         VERSION=$(cat builddeck.tag)
+        buildkite-agent artifact download builddeck . --step release_build
+        buildkite-agent artifact download builddeck.sha256 . --step release_build
         echo "Creating GitHub release for ${VERSION}"
         .buildkite/release.sh "${VERSION}"
       else