update build to delete local tags

Author: bordumb

.github/workflows/release.yml

@@ -34,7 +34,10 @@ jobs:
       # --- Artifact signing (mirrors auths/auths release workflow) ---
       - name: Install auths CLI
         run: |
-          curl -sL https://github.com/auths-dev/auths/releases/latest/download/auths-linux-x86_64.tar.gz | tar xz -C /usr/local/bin
+          mkdir -p /tmp/auths-install
+          curl -sL https://github.com/auths-dev/auths/releases/latest/download/auths-linux-x86_64.tar.gz | tar xz -C /tmp/auths-install
+          sudo cp /tmp/auths-install/auths /usr/local/bin/auths
+          rm -rf /tmp/auths-install
 
       - name: Sign dist/index.js
         env:

justfile

@@ -21,11 +21,18 @@ ci: test build check-dist
 sign-dist:
     auths artifact sign dist/index.js
 
-# Cut a release: bump version, commit, then tag+push via release script
+# Cut a release: bump version (if needed), commit, then tag+push via release script
 # The release workflow handles build verification, artifact signing, and GitHub release creation.
 # Usage: just release 1.0.3
 release VERSION: test build
-    npm version {{VERSION}} --no-git-tag-version
-    git add package.json package-lock.json dist/ src/ .github/ justfile
-    git commit -m "build: bump version to {{VERSION}}"
+    #!/usr/bin/env bash
+    set -euo pipefail
+    CURRENT=$(node -p "require('./package.json').version")
+    if [ "$CURRENT" != "{{VERSION}}" ]; then
+      npm version {{VERSION}} --no-git-tag-version
+      git add package.json package-lock.json dist/ src/ .github/ justfile
+      git commit -m "build: bump version to {{VERSION}}"
+    else
+      echo "Version already {{VERSION}}, skipping bump"
+    fi
     python scripts/release.py --push