From 6b8b9b73342ed75f7f81439f8e68a41953d56477 Mon Sep 17 00:00:00 2001
From: mattenarle10 <enarlem10@gmail.com>
Date: Wed, 7 Oct 2026 00:18:34 +0800
Subject: [PATCH] fix(release): publish normalized latest.json under its real
 name

---
 .github/workflows/release.yml | 29 +++++++++++++++++------------
 1 file changed, 17 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4ee457a..5e65400 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -332,6 +332,18 @@ jobs:
       - name: checkout release tooling
         uses: actions/checkout@v7
 
+      - name: publish draft release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          echo "publishing draft release for ${{ env.RELEASE_TAG }}"
+          gh release edit "${{ env.RELEASE_TAG }}" \
+            --repo "${{ github.repository }}" \
+            --draft=false \
+            --latest
+
+      # runs after publishing: a draft's asset download URLs use a temporary
+      # untagged-… path that stops resolving once the release is public.
       - name: normalize updater manifest URLs
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -359,26 +371,19 @@ jobs:
             --jq '[.[] | select(.tag_name == "${{ env.RELEASE_TAG }}") | .assets | map({ name, url, browser_download_url })][0] // []' \
             > "$WORK_DIR/release-assets.json"
 
+          # the uploaded file must itself be named latest.json: `path#label`
+          # only sets a display label and would add a second asset instead.
+          mkdir -p "$WORK_DIR/out"
           node scripts/normalize-latest-json.mjs \
             "$WORK_DIR/latest.json" \
             "$WORK_DIR/release-assets.json" \
-            "$WORK_DIR/latest.normalized.json"
+            "$WORK_DIR/out/latest.json"
 
           gh release upload "${{ env.RELEASE_TAG }}" \
-            "$WORK_DIR/latest.normalized.json#latest.json" \
+            "$WORK_DIR/out/latest.json" \
             --repo "${{ github.repository }}" \
             --clobber
 
-      - name: publish draft release
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          echo "publishing draft release for ${{ env.RELEASE_TAG }}"
-          gh release edit "${{ env.RELEASE_TAG }}" \
-            --repo "${{ github.repository }}" \
-            --draft=false \
-            --latest
-
   # fires a Vercel deploy hook after a release publishes so markamd.vercel.app
   # rebuilds and picks up the new version automatically (no manual empty
   # commit needed). gracefully no-ops if the secret isn't set yet.