Replace delete-artifact action with REST api calls using gh CLI

[mbien]

tried to come up with a way to remove the third party action.

attempt 1 using github-script looked like:

      - name: Delete Workflow Artifacts
        uses: actions/github-script@v8
        with:
          script: |
            const artifacts = await github.rest.actions.listWorkflowRunArtifacts({
              owner: context.repo.owner,
              repo: context.repo.repo,
              run_id: context.runId
            });
            for (const artifact of artifacts.data.artifacts) {
              if (artifact.name === "build.tar.zst") {
                console.log("removing " + artifact.name);
                await github.rest.actions.deleteArtifact({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  artifact_id: artifact.id
                });
              }
            }

attempt 2 using gh CLI:

      - name: Delete Workspace Artifact
        run: |
          ARTIFACT_ID=$(gh api /repos/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}/artifacts --jq ".artifacts[] | select(.name == \"${NAME}\") | .id")
          if [ -n "$ARTIFACT_ID" ]; then
            gh api /repos/${GITHUB_REPOSITORY}/actions/artifacts/${ARTIFACT_ID} -X DELETE
          fi
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NAME: build.tar.zst

both would require

    permissions:
      actions: write

unfortunately

I don't know what black magic geekyeggo/delete-artifact uses to delete it without permissions set.

[ebarboni]

replacement of #9280

[neilcsmith-net]

Looks good. Surprised that gh doesn't have a command to handle this - see gh run download and gh rn delete but nothing for managing individual artifacts? Should remember to update this if that changes.

👍

[mbien]

we may have to revert this because this doesn't seem to work in (certain?) PRs. The actions permission is still set to read.

e.g https://github.com/apache/netbeans/actions/runs/26810081110