From 96732306a8f198dc106b9ff192b7c1a1b8dabce7 Mon Sep 17 00:00:00 2001
From: ezl-keygraph <ezhil@keygraph.io>
Date: Mon, 16 Mar 2026 21:05:20 +0530
Subject: [PATCH] feat: mark GitHub release as latest during rollback

---
 .github/workflows/rollback.yml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/rollback.yml b/.github/workflows/rollback.yml
index 00129aa..132bdf8 100644
--- a/.github/workflows/rollback.yml
+++ b/.github/workflows/rollback.yml
@@ -9,7 +9,7 @@ on:
         type: string
 
 permissions:
-  contents: read
+  contents: write
 
 concurrency:
   group: rollback-latest-${{ github.event.inputs.version }}
@@ -17,7 +17,7 @@ concurrency:
 
 jobs:
   rollback:
-    name: Roll back npm and Docker latest
+    name: Roll back npm, Docker, and GitHub release latest
     runs-on: ubuntu-latest
     environment: release-rollback
 
@@ -105,6 +105,11 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_ROLLBACK_TOKEN }}
         run: npm dist-tag add "@keygraph/shannon@${{ steps.target.outputs.version }}" latest
 
+      - name: Mark GitHub release as latest
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh release edit "v${{ steps.target.outputs.version }}" --latest
+
       - name: Show final npm dist-tags
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_ROLLBACK_TOKEN }}
@@ -121,4 +126,5 @@ jobs:
             echo "- Target version: \`${{ steps.target.outputs.version }}\`"
             echo "- npm package: \`@keygraph/shannon\`"
             echo "- Docker image: \`keygraph/shannon\`"
+            echo "- GitHub release: \`v${{ steps.target.outputs.version }}\` marked as latest"
           } >> "$GITHUB_STEP_SUMMARY"