From cbc9468a78a3448a12b4ecb87d955b3101b352ab Mon Sep 17 00:00:00 2001
From: Chris Logue Linux <17660199+omniscoder@users.noreply.github.com>
Date: Mon, 12 Jan 2026 15:58:45 -0500
Subject: [PATCH] ci: fix crates publish gating

---
 .github/workflows/release.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2f8c646..c28ab39 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -134,7 +134,9 @@ jobs:
   publish-crates:
     runs-on: ubuntu-latest
     needs: rust-package
-    if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') && secrets.CRATES_IO_TOKEN != '' }}
+    if: ${{ startsWith(github.ref, 'refs/tags/v') && !contains(github.ref_name, 'rc') && !contains(github.ref_name, 'a') && !contains(github.ref_name, 'b') }}
+    env:
+      CRATES_IO_TOKEN: ${{ secrets.CRATES_IO_TOKEN }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -143,9 +145,14 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
 
       - name: Cargo publish ogn-sdk
+        if: ${{ env.CRATES_IO_TOKEN != '' }}
         env:
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CRATES_IO_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ env.CRATES_IO_TOKEN }}
         working-directory: sdk/rust/ogn-sdk
         run: |
           set -euxo pipefail
           cargo publish --no-verify
+
+      - name: Skip crates.io publish (missing CRATES_IO_TOKEN)
+        if: ${{ env.CRATES_IO_TOKEN == '' }}
+        run: echo "CRATES_IO_TOKEN is not set; skipping cargo publish."