chore(github): verify release tag matches Cargo.toml before publishing anything

Author: jvatic

.github/workflows/release.yml

@@ -37,9 +37,36 @@ jobs:
           echo "Using ref: $REF"
           echo "Using version: $VERSION"
 
+  verify-version:
+    name: Verify version matches tag
+    needs: setup
+    runs-on: ubuntu-latest
+    
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.setup.outputs.ref }}
+      
+      - name: Verify Cargo.toml version matches tag
+        run: |
+          TAG_VERSION="${{ needs.setup.outputs.version }}"
+          # Remove 'v' prefix if present
+          TAG_VERSION="${TAG_VERSION#v}"
+          CARGO_VERSION=$(grep "^version" Cargo.toml | head -1 | cut -d'"' -f2)
+          
+          echo "Tag version: $TAG_VERSION"
+          echo "Cargo.toml version: $CARGO_VERSION"
+          
+          if [ "$TAG_VERSION" != "$CARGO_VERSION" ]; then
+            echo "❌ Error: Tag version ($TAG_VERSION) doesn't match Cargo.toml version ($CARGO_VERSION)"
+            echo "Please ensure the version in Cargo.toml matches the tag you're trying to release."
+            exit 1
+          fi
+          echo "✅ Version check passed!"
+
   test:
     name: Run tests
-    needs: setup
+    needs: [setup, verify-version]
     runs-on: ubuntu-latest
 
     steps:
@@ -58,7 +85,7 @@ jobs:
 
   build-binaries:
     name: Build binaries
-    needs: [setup, test]
+    needs: [setup, verify-version, test]
     strategy:
       matrix:
         include:
@@ -252,14 +279,9 @@ jobs:
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
 
-      - name: Verify version matches tag
+      - name: Get Cargo version for checking
         run: |
-          TAG_VERSION="${GITHUB_REF#refs/tags/v}"
           CARGO_VERSION=$(grep "^version" Cargo.toml | head -1 | cut -d'"' -f2)
-          if [ "$TAG_VERSION" != "$CARGO_VERSION" ]; then
-            echo "Error: Tag version ($TAG_VERSION) doesn't match Cargo.toml version ($CARGO_VERSION)"
-            exit 1
-          fi
           echo "CARGO_VERSION=$CARGO_VERSION" >> $GITHUB_ENV
 
       - name: Authenticate with crates.io