From 343dae1bb1616706f82fbefa2ab68aae5d4bcbfc Mon Sep 17 00:00:00 2001
From: Viktor Ishchenko <viktori@flamingo.cx>
Date: Fri, 18 Sep 2026 14:18:51 +0200
Subject: [PATCH 1/2] publish a latest pre-release on every push to master

---
 .github/workflows/release.yml | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3f1765a1873..db4dfaebe66 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -52,7 +52,7 @@ jobs:
         run: |
           set -euo pipefail
           v="${INPUT_VERSION:-}"
-          [ -n "$v" ] || v="$(git describe --tags --abbrev=0 2>/dev/null || true)"
+          [ -n "$v" ] || v="$(git describe --tags --abbrev=0 --exclude latest 2>/dev/null || true)"
           v="${v#v}"
           case "$v" in
             [0-9]*.[0-9]*.[0-9]*) ;;
@@ -310,8 +310,8 @@ jobs:
     needs: [build_macos, create_universal_macos, build_windows]
     runs-on: ubuntu-latest
     if: |
-      github.event_name == 'workflow_dispatch' && 
-      inputs.version != ''
+      github.event_name == 'push' ||
+      (github.event_name == 'workflow_dispatch' && inputs.version != '')
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -355,13 +355,19 @@ jobs:
           - **Windows** (amd64): \`osquery-windows-amd64.zip\`
           EOF
 
+      - name: Delete existing latest release
+        if: ${{ github.event_name == 'push' }}
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh release delete latest --yes --cleanup-tag || true
+
       - name: Create Release
         uses: softprops/action-gh-release@v2
         with:
-          tag_name: ${{ inputs.version }}
-          name: "🦩 ${{ inputs.version }}"
+          tag_name: ${{ inputs.version || 'latest' }}
+          name: "🦩 ${{ inputs.version || 'latest' }}"
           draft: false
-          prerelease: false
+          prerelease: ${{ github.event_name == 'push' }}
           token: ${{ secrets.GITHUB_TOKEN }}
           body_path: RELEASE_HEADER.md
           files: |

From ad0f218b4fd97b7023790cff16b55a0098560e93 Mon Sep 17 00:00:00 2001
From: Viktor Ishchenko <viktori@flamingo.cx>
Date: Fri, 18 Sep 2026 14:28:54 +0200
Subject: [PATCH 2/2] run the latest release job one at a time

---
 .github/workflows/release.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index db4dfaebe66..b3cecf92c03 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -312,6 +312,9 @@ jobs:
     if: |
       github.event_name == 'push' ||
       (github.event_name == 'workflow_dispatch' && inputs.version != '')
+    concurrency:
+      group: ${{ github.event_name == 'push' && 'release-latest' || github.run_id }}
+      queue: max
     steps:
       - name: Checkout
         uses: actions/checkout@v4