ci(release): npm-first 发布顺序，桌面签名资产异步补挂 - #646

Merged

deepcoldy merged 4 commits into

fix/release-npm-first

Jul 28, 2026

Commits on Jul 28, 2026

ci(release): npm-first 发布顺序，桌面签名资产异步补挂

xu4wang
and
Riff
committed
ci(release): 记录 npm-first 的签名失败兜底路径（codex 复审反馈）

xu4wang
and
Riff
committed
ci(release): 恢复路径 checkout 钉到 tag，修签名资产与 tag 不同源（codex 复审 blocker）

xu4wang
and
Riff
committed
ci(release): desktop push 路径 checkout 用 github.sha 而非 github.ref，修 TOCTOU 不同源

xu4wang
and
Riff
committed