automated download workflow

.github/workflows/download-latest.yml

@@ -1,12 +1,8 @@
 name: "Update Determinate Nix binary"
 on:
-    repository_dispatch:
     workflow_dispatch:
     schedule:
         - cron: "00 0,6,12,18 * * *"
-    push:
-      paths:
-        - '.github/workflows/*'
 jobs:
     download-binary:
         runs-on: ubuntu-latest
@@ -90,12 +86,32 @@ jobs:
                 COMMIT_ID: ${{ env.COMMIT_ID }}
             - name: Push new tag
               run: |
+                git fetch
                 git push origin "$DETERMINATE_VERSION" --force
                 git checkout main
+                git pull
                 git merge "$DETERMINATE_VERSION"
                 git push
               env:
                 DETERMINATE_VERSION: ${{ env.DETERMINATE_VERSION }}
+        outputs:
+            COMMIT_ID: ${{ env.COMMIT_ID }}
+    release-tag:
+        runs-on: ubuntu-latest
+        needs: [download-binary,commit-data]
+        if: ${{ needs.download-binary.outputs.DETERMINATE_BINARY_DIFF != 0 }}
+        steps:
+            - name: Reset outputs from previous job
+              run: | 
+                  echo "DETERMINATE_BINARY=${{ needs.download-binary.outputs.DETERMINATE_BINARY }}" | tee -a "$GITHUB_ENV" 
+                  echo "DETERMINATE_VERSION=${{ needs.download-binary.outputs.DETERMINATE_VERSION }}" | tee -a "$GITHUB_ENV"
+                  echo "COMMIT_ID=${{ needs.commit-data.outputs.COMMIT_ID }}" | tee -a "$GITHUB_ENV"
+            - name: Checkout repository
+              uses: actions/checkout@v4
+            - name: fetch latest
+              run: |
+                git fetch
+                git checkout "$DETERMINATE_VERSION"
             - name: Publish release
               uses: akkuman/gitea-release-action@v1
               env: