fix: pass release tag to build workflows for asset uploads

Build workflows need the tag to upload assets to the correct
GitHub Release. When called via workflow_call from release.yml,
GITHUB_REF is refs/heads/main (not a tag).

Add tag input to release-desktop and release-mobile workflows.
Resolve tag from: explicit input > GITHUB_REF tag > git describe.
Also include relay binaries in desktop release assets.

Author: jamesagarside

.github/workflows/release-desktop.yml

@@ -4,7 +4,17 @@ on:
   push:
     tags: ['v*']
   workflow_call:
+    inputs:
+      tag:
+        description: 'Release tag (e.g. v0.5.1-alpha). Auto-detected from git when triggered by tag push.'
+        required: false
+        type: string
   workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag to upload assets to (e.g. v0.5.1-alpha)'
+        required: false
+        type: string
 
 permissions:
   contents: write
@@ -195,23 +205,43 @@ jobs:
           name: relay-${{ matrix.name }}
           path: helios-relay-${{ matrix.name }}
 
-  create-release:
-    needs: [build-macos, build-linux, build-windows]
+  upload-assets:
+    needs: [build-macos, build-linux, build-windows, build-relay]
     if: ${{ always() && (needs.build-linux.result == 'success' || needs.build-windows.result == 'success' || needs.build-macos.result == 'success') }}
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Resolve release tag
+        id: tag
+        env:
+          INPUT_TAG: ${{ inputs.tag }}
+        run: |
+          if [ -n "$INPUT_TAG" ]; then
+            echo "tag=$INPUT_TAG" >> "$GITHUB_OUTPUT"
+          elif [[ "$GITHUB_REF" == refs/tags/* ]]; then
+            echo "tag=${GITHUB_REF#refs/tags/}" >> "$GITHUB_OUTPUT"
+          else
+            TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+            echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+          fi
+
       - uses: actions/download-artifact@v4
         with:
           path: artifacts
 
-      - name: Create GitHub Release
+      - name: Upload assets to GitHub Release
+        if: ${{ steps.tag.outputs.tag != '' }}
         uses: softprops/action-gh-release@v2
         with:
-          generate_release_notes: true
+          tag_name: ${{ steps.tag.outputs.tag }}
           fail_on_unmatched_files: false
           files: |
             artifacts/macos-dmg/helios-gcs-macos.dmg
             artifacts/linux-tarball/helios-gcs-linux-x64.tar.gz
             artifacts/linux-appimage/helios-gcs-linux-x64.AppImage
             artifacts/windows-zip/helios-gcs-windows-x64.zip
             artifacts/windows-installer/helios-gcs-windows-x64-setup.exe
+            artifacts/relay-*/helios-relay-*

.github/workflows/release-mobile.yml

@@ -4,7 +4,17 @@ on:
   push:
     tags: ['v*']
   workflow_call:
+    inputs:
+      tag:
+        description: 'Release tag (e.g. v0.5.1-alpha). Auto-detected from git when triggered by tag push.'
+        required: false
+        type: string
   workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag to upload assets to (e.g. v0.5.1-alpha)'
+        required: false
+        type: string
 
 permissions:
   contents: write
@@ -128,18 +138,39 @@ jobs:
           name: ios-ipa
           path: build/ios/ipa/*.ipa
 
-  upload-to-release:
+  upload-assets:
     needs: [build-android, build-ios]
     if: ${{ always() && (needs.build-android.result == 'success' || needs.build-ios.result == 'success') }}
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Resolve release tag
+        id: tag
+        env:
+          INPUT_TAG: ${{ inputs.tag }}
+        run: |
+          if [ -n "$INPUT_TAG" ]; then
+            echo "tag=$INPUT_TAG" >> "$GITHUB_OUTPUT"
+          elif [[ "$GITHUB_REF" == refs/tags/* ]]; then
+            echo "tag=${GITHUB_REF#refs/tags/}" >> "$GITHUB_OUTPUT"
+          else
+            TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+            echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+          fi
+
       - uses: actions/download-artifact@v4
         with:
           path: artifacts
 
       - name: Upload to GitHub Release
+        if: ${{ steps.tag.outputs.tag != '' }}
         uses: softprops/action-gh-release@v2
         with:
+          tag_name: ${{ steps.tag.outputs.tag }}
+          fail_on_unmatched_files: false
           files: |
             artifacts/android-apk/app-release.apk
             artifacts/android-aab/app-release.aab

.github/workflows/release.yml

@@ -130,13 +130,17 @@ jobs:
   # Tags pushed by GITHUB_TOKEN don't trigger other workflows, so we
   # call them explicitly here.
   build-desktop:
-    needs: create-release
+    needs: [create-release, bump-version]
     uses: ./.github/workflows/release-desktop.yml
+    with:
+      tag: ${{ needs.bump-version.outputs.tag }}
     secrets: inherit
 
   build-mobile:
-    needs: create-release
+    needs: [create-release, bump-version]
     uses: ./.github/workflows/release-mobile.yml
+    with:
+      tag: ${{ needs.bump-version.outputs.tag }}
     secrets: inherit
 
   deploy-webapp: