From d27e5b8e2fbcdf9a1f1c63e29b69808a8196050c Mon Sep 17 00:00:00 2001
From: zackees <z@zackees.com>
Date: Mon, 22 Jun 2026 13:30:42 -0700
Subject: [PATCH] ci: make manual release dispatch build by default

---
 .github/workflows/release-auto.yml | 32 +++++++++++++++++++++++++++---
 1 file changed, 29 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-auto.yml b/.github/workflows/release-auto.yml
index 02956b0c..2ec63e7f 100644
--- a/.github/workflows/release-auto.yml
+++ b/.github/workflows/release-auto.yml
@@ -7,6 +7,12 @@ on:
       - Cargo.toml
       - pyproject.toml
   workflow_dispatch:
+    inputs:
+      publish:
+        description: "Publish GitHub Release and PyPI after building"
+        required: false
+        type: boolean
+        default: false
 
 permissions:
   contents: write
@@ -40,6 +46,8 @@ jobs:
       - name: Check release eligibility
         id: prepare
         shell: bash
+        env:
+          PUBLISH_REQUESTED: ${{ inputs.publish }}
         run: |
           set -euo pipefail
 
@@ -88,13 +96,30 @@ jobs:
           should_publish_pypi="false"
           newest="$(printf '%s\n%s\n' "$latest" "$cargo_version" | sort -V | tail -n1)"
 
-          if [ "$tag_exists" != "true" ] && [ "$newest" = "$cargo_version" ] && [ "$pypi_file_count" -lt 4 ]; then
+          if [ "${GITHUB_EVENT_NAME}" != "workflow_dispatch" ] \
+            && [ "$tag_exists" != "true" ] \
+            && [ "$newest" = "$cargo_version" ] \
+            && [ "$pypi_file_count" -lt 4 ]; then
             should_build="true"
             should_publish_github="true"
             should_publish_pypi="true"
-          elif [ "${GITHUB_EVENT_NAME}" = "workflow_dispatch" ] && [ "$tag_exists" = "true" ] && [ "$pypi_file_count" -lt 4 ]; then
+          fi
+
+          # Manual dispatch is always at least a build. Publishing is an
+          # explicit opt-in checkbox so release dry-runs are the default.
+          if [ "${GITHUB_EVENT_NAME}" = "workflow_dispatch" ]; then
             should_build="true"
-            should_publish_pypi="true"
+            release_ref="${commit_sha}"
+            should_publish_github="false"
+            should_publish_pypi="false"
+
+            if [ "${PUBLISH_REQUESTED:-false}" = "true" ]; then
+              should_publish_github="true"
+              should_publish_pypi="true"
+              if [ "$tag_exists" = "true" ]; then
+                release_ref="${version}"
+              fi
+            fi
           fi
 
           {
@@ -114,6 +139,7 @@ jobs:
           echo "Tag SHA: ${tag_sha:-<none>}"
           echo "Release ref: ${release_ref}"
           echo "Should build: ${should_build}"
+          echo "Publish requested: ${PUBLISH_REQUESTED:-false}"
           echo "Should publish GitHub release: ${should_publish_github}"
           echo "Should publish PyPI: ${should_publish_pypi}"