From dc5a416949dbca4b1e582d8c51f4fc51e4284a80 Mon Sep 17 00:00:00 2001
From: Max Litruv Boonzaayer <litruv@gmail.com>
Date: Fri, 17 Apr 2026 19:43:36 +1000
Subject: [PATCH] ci: use npm ci, use upload_url from github api for releases
 [skip ci]

---
 .gitea/workflows/build.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 5a533d8..8fae1fc 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -86,7 +86,7 @@ jobs:
         uses: android-actions/setup-android@v3
 
       - name: Install dependencies (root)
-        run: npm install --prefer-offline
+        run: npm ci --prefer-offline
 
       - name: Clean previous cinny dist
         run: rm -rf cinny/dist
@@ -219,13 +219,16 @@ jobs:
           fi
 
           FILENAME="Paarrot-${VERSION}.apk"
+          UPLOAD_URL=$(curl -s -H "Authorization: token ${GH_TOKEN}" \
+            -H "Accept: application/vnd.github+json" \
+            "${API_BASE}/repos/${REPO}/releases/${RELEASE_ID}" | jq -r '.upload_url' | sed 's/{?name,label}//')
           echo "Uploading ${FILENAME} to GitHub..."
           curl -s -X POST \
             -H "Authorization: token ${GH_TOKEN}" \
             -H "Accept: application/vnd.github+json" \
             -H "Content-Type: application/octet-stream" \
             --data-binary "@${APK}" \
-            "https://uploads.github.com/repos/${REPO}/releases/${RELEASE_ID}/assets?name=${FILENAME}"
+            "${UPLOAD_URL}?name=${FILENAME}"
           echo ""
 
           echo "GitHub release complete!"