ci: fix stable release publishing wrong npm versions

Stable releases published npm packages as "<old>-<new>" (e.g. 2.9.4-2.10.0)
and pointed the 'latest' dist-tag at them. Two causes:

- release.yml passed prerel_name for stable releases, so
  npm:configure_prerelease appended the tag to the package version. That
  suffix is only meaningful for nightlies.
- build.yml checked out the ref the workflow was dispatched on rather than
  the tag, so it built the tree from *before* create-tag's version bump
  commit. release-tag-ruby_wasm-gem already passed an explicit ref, which is
  why the gems carried the right version while npm did not.

Add a 'ref' input to build.yml and thread it through every checkout, and
drop prerel_name from the stable path so the bumped version publishes as-is.

ci:publish took the tag from prerel_name, falling back to GITHUB_REF_NAME.
With prerel_name gone that fallback yields 'main' on a workflow_dispatch, so
add a separate 'release_tag' input for it.

Affected releases: 2.9.0, 2.9.4 and 2.10.0 published as 2.8.1-2.9.0,
2.9.3-2.9.4 and 2.9.4-2.10.0. The last clean stable npm version is 2.8.1.

Author: kateinoigakukun

.github/workflows/build.yml

@@ -14,7 +14,15 @@ on:
         default: false
       prerel_name:
         type: string
-        description: "Pre-release name to be released"
+        description: "Pre-release suffix appended to npm package versions (nightly only)"
+        default: ""
+      ref:
+        type: string
+        description: "Git ref to build. Defaults to the triggering ref."
+        default: ""
+      release_tag:
+        type: string
+        description: "Tag name to publish under. Defaults to prerel_name, then the triggering ref name."
         default: ""
 
 jobs:
@@ -47,6 +55,8 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
+        with:
+          ref: ${{ inputs.ref }}
       - uses: docker/setup-buildx-action@v3
       - uses: docker/login-action@v3
         with:
@@ -70,6 +80,8 @@ jobs:
       entries: ${{ steps.set-matrix.outputs.entries }}
     steps:
       - uses: actions/checkout@v6
+        with:
+          ref: ${{ inputs.ref }}
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: "3.4.1"
@@ -98,6 +110,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
         with:
+          ref: ${{ inputs.ref }}
           submodules: true
       - uses: actions/download-artifact@v8
         with:
@@ -164,6 +177,8 @@ jobs:
       contents: write
     steps:
       - uses: actions/checkout@v6
+        with:
+          ref: ${{ inputs.ref }}
       - uses: actions/download-artifact@v8
         with:
           name: build-manifest
@@ -179,7 +194,7 @@ jobs:
           ruby-version: "3.4.1"
           bundler-cache: true
       - run: ./bin/setup
-      - run: echo "PREREL_NAME=${{ inputs.prerel_name }}" >> $GITHUB_ENV
-      - run: bundle exec rake "ci:publish[${PREREL_NAME:-$GITHUB_REF_NAME}]"
+      - run: echo "RELEASE_TAG=${{ inputs.release_tag || inputs.prerel_name }}" >> $GITHUB_ENV
+      - run: bundle exec rake "ci:publish[${RELEASE_TAG:-$GITHUB_REF_NAME}]"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -62,6 +62,7 @@ jobs:
     uses: ./.github/workflows/build.yml
     with:
       publish: true
+      ref: ${{ needs.create-tag.outputs.tag-name }}
       prerel_name: ${{ needs.create-tag.outputs.tag-name }}
     secrets: inherit
 
@@ -77,7 +78,11 @@ jobs:
     uses: ./.github/workflows/build.yml
     with:
       publish: true
-      prerel_name: ${{ needs.create-tag.outputs.tag-name || github.ref_name }}
+      # Stable releases publish the bumped version as-is, so no prerel_name here.
+      # The bump commit is created by create-tag, so build from the tag, not the
+      # ref the workflow was dispatched on.
+      ref: ${{ needs.create-tag.outputs.tag-name || github.ref_name }}
+      release_tag: ${{ needs.create-tag.outputs.tag-name || github.ref_name }}
     secrets: inherit
 
   release-tag-ruby_wasm-gem: