[rubas-agent]

Before

The live artifacts of rubas/kagi on 2026-10-17, from the GitHub API:

Artifact	Count	Size
kagi-linux-x86_64.tar.gz	7	64.1 MB
kagi-macos-aarch64.tar.gz	7	57.3 MB
install.sh	8	0.01 MB
kagi-skills.tar.gz	6	0.01 MB

The upload sets no retention-days, so each artifact lives for the repo default of 90 days. install.sh and kagi-skills.tar.gz come from releases before #52, and they expire by 2026-12-29.

Problem

The release job of the same run downloads the archives and attaches them to the GitHub release. After that, nothing reads the artifacts, but they stay for 90 days.

After

Artifact	Retention
kagi-linux-x86_64.tar.gz	1 day
kagi-macos-aarch64.tar.gz	1 day

Details

• File: .github/workflows/release.yml, job build, the actions/upload-artifact step after actions/attest-build-provenance.
• Consumer: job release downloads the archives and uploads them with softprops/action-gh-release. The release keeps its own copy, and mise installs from the release.
• The job build runs only when a release is due, so no other run uploads these artifacts. A recovery run through workflow_dispatch builds the archives again and does not need old artifacts.
• No other upload-artifact or docker/build-push-action step exists in .github/.
• Same change as rubas/babel#991.