From 4c00af7c4478dda9a6a825742e817ff5c2576ab1 Mon Sep 17 00:00:00 2001
From: datadunia <datadunia@ymail.com>
Date: Wed, 6 May 2026 17:33:20 +0700
Subject: [PATCH] fix: checkout with submodules false + manual auth

---
 .gitea/workflows/release.yaml | 22 +++++++++++++++-------
 1 file changed, 15 insertions(+), 7 deletions(-)

diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index f1f04f9..e26ce52 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -17,11 +17,15 @@ jobs:
         goarch: [amd64, arm64]
     steps:
       - name: Checkout code
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          submodules: false
+
+      - name: Update submodules with auth
         run: |
-          git config --global http.extraHeader "Authorization: Bearer ${{ gitea.token }}"
-          git pull origin ${{ gitea.ref_name }}
+          git config http.extraHeader "Authorization: Bearer ${{ gitea.token }}"
           git submodule update --init --recursive
-          ls -la app/  # Debug: verify submodule
+          ls -la app/  # Debug
 
       - name: Setup Go
         uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff
@@ -57,12 +61,16 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout code manually
+      - name: Checkout code
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          submodules: false
+
+      - name: Update submodules with auth
         run: |
-          git config --global http.extraHeader "Authorization: Bearer ${{ gitea.token }}"
-          git pull origin ${{ gitea.ref_name }}
+          git config http.extraHeader "Authorization: Bearer ${{ gitea.token }}"
           git submodule update --init --recursive
-          ls -la app/  # Debug: verify submodule
+          ls -la app/  # Debug
 
       - name: Download all artifacts
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093