From d9d407f9a449d8fa0ceabcbcb6b6e584bff56489 Mon Sep 17 00:00:00 2001
From: fuhaitao <21497724@qq.com>
Date: Sun, 15 Mar 2026 10:21:42 +0800
Subject: [PATCH] ci: build artifacts on dev and harden release workflow

---
 .DS_Store                     | Bin 10244 -> 0 bytes
 .github/workflows/release.yml |  19 ++++++++++++++++++-
 2 files changed, 18 insertions(+), 1 deletion(-)
 delete mode 100644 .DS_Store

diff --git a/.DS_Store b/.DS_Store
deleted file mode 100644
index 387e876549e31ae07998e8aa925451a34fb97c1c..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 10244
zcmeHNYitx%6h3GAV8$*o1*+%@9jyvti!DVEQ7GM_R7whLOCO+Rc4ufuW@px&*)4)-
z6B0E(iN+Z9hsIabAV`d&(HP&DXnX}pjER^SV>IF)W1@*s&z(El&TLzJBtA2@nS18m
zd(J)Qp8K8qm@NQcYhG&tPyj%rhfz63*#wETvu9iq{F((sk>tS~Y)Yo>Om-Y+R1tX~
z@<8N)$ODlFA`kpqJV1LkOJWtLQ6709@<8N)Q4g^7L7|7y7N3rA>Mb3Vc~=0U<y7q@
zdY9P?QN^b%J{{qdS|}kGCCWw7zhWR4r+UTbYw_s_r(7J+zkHyt8T}gydfKUf#bXC-
z;WWx44@4dq?*VpqFNXy%2nM*p`#XO7%1gnvjNR6jGVK)AiF<cf-*v}<Lo37W+Hu>n
zLu20tgsFQ-6s8pQ!Vu&k71R!pER5#}+OYKt`Mu@)JR3^-$=G9-OwJXw2Ve`cryNws
z(x20A+G&5RY&l`$T=0vR7~2?MYS_v8e9xt_rs24ajYm)@E3c@WB2E#j#LJUI_Hfcw
z-MrJP<~FfXmu;J=;=7vKXz0TO^2~&7xvF95IZwdQbYj`uV_2F!+-m17&GBTDyg`&i
zX+WN}bLZmbdZlUU;$8L1&Zg$(#(HH*^O9Y=B(bLMyk#2(wwW2rzR9x~&|fxTDld=b
zHwVWPoPnwje#!*fg1*OZmQ{A__2=LBS<vefwFmt@b&<jh81;7{nX^pW8l*aA=LwLY
znaB|)Z9<4ic^bBr%*lS@3(iSc#wD2ym|+>5T_Q7+`nAD=t%UtS(&U0pQd!cddhe`e
zqJEgqg1RfIpPVmKf*t(vc)b4;{Dj6I#1K^O-c92VwFhxz!$n0LmGF#3@MJteJc0B8
zsR`>T!Bhp!afaq-5cH6R!V`x`GSC{d@7jkNj$ZVXhw~7}m~|6#glrRDX0}PN0anpU
z(gtgZE+AX9Fgk^gh%1PySV&?3cF-z0ksOPfpxlXsMV&CL(`X&a8$8P1+|re;Eb&KV
zgMP!pyL(CYxVnO#JhtPK*S7H0`Zr|8eEWN4g5Jhq@BCLuW92IdjXLb-vI8Y!4)OkP
zA~G<3%}JXn+I85{8X9b1LMzsv^UlF>?M@-Vx3{wS#qI5r;`Sz;P!)@v81LTL)7{(G
zGa$=(N8g~Es%sSVHr3Ug0ePB3`(1n5w$|nJ0_}4>Y1_<aENZDvt7bY+%=${xOd2~l
zcRFXA<~rLkT*J2d2IT2Xs58q-&PF}w5bbsK?Jg5wy@&XF`yD&yCOi$j1}SA+{p$8E
zUqF)fO`A3QjI+;eJpaPwiAy`y9hR%7&xqB;PVOlfj*&9;?qNf7hx$|}ty`L54ffM+
zYq`c&L(fUoSTA*1YDPaiqk6i0%Bk^qZ$4#Ql{eh0<vLO1ebvTKm*i)}%^Hnst*tRh
z&1;F*#?KPPO{_kV(<$fGv3c?NlB|kd4w=fkXo#IB$&S>ujkbO+x-hm#lr^c_R8zXi
ztCqx;it-w%r@(!}D{EpGi&8KB`jR1|9bVTGZx!XY#4DKM4%Klxv${pP*$~=l<MBRL
zzf#k5%^yL$J-$YiKNS0&AvLFW4%2yrchny56h&`Bsh;(;N;6!0v@yvVWy2~Mbkw0)
z;wK)ljsWE)8S7f+@mJ4@buEp4iwL!_kQT)bI)UZj2G|1+!jteUyaKPnYw#g_0-wWI
z@E!aNzo39+C}K69il^ahoP%?59?r*e@d8|lt(d@0?8QFZgqu;tD{&iU&_V~V!CiPA
zj^OopJMO_d@J_rBAI3-UQQVKu;q&+czKCz*Vf+-2;%E33evRMYG5kS5K@iG>8exu5
zD=0#<ut>OASRt$y)^f{*;(@B)ABj(djr0<ZGN<4l5{3IGi6Uk7;`Y^-t!e)+MA667
zSlrC4IqBqCr?X&My1aE1bsVHcTn6#(K|B-~9>hH~l){su>$KT(VoEo~fWEynDvQx7
zPhl}B9%kHU)WsCJf}(^M=gy;IB}E7?);B1MEKp$bV$(t;CYMpzNuKQD1}dUoxNuo4
zCYMtH^0pOos0e-`(MH{{a1zIW{pVnP1dhTNa14HgpRo#Mtidy}0h@6tfp`tB#dWwI
zHxQ67#{t~pf!QP|+nB|xaVNp~S_1TqcoW`&x8iMhH{OHydZ2z3AH&D-349u#!DsOx
zzKpNp>-Yw~iHGog{1`tifo?|_y7*-&bb~wikz4m4IJn<C3x(hvJoit=6WF0EdcS{w
zsSWi}a#myQQTppWP{vg#?EC+!$$$U<>kWxCL>`Dd@Q--_%iEG|t)#wqrYW_AeQQ_f
z*+LIXjBkWfPlPh>b39S+b37H;=XmePM|H)+9+PXKdPYY$r8i1{`;P%*|D_b&|9|(l
VgTQqWqWk~9`ipMpbT#q)|5r4ajXnSX

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d768f96..02b0c8d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+      - dev
     tags:
       - "v*"
     paths:
@@ -17,6 +18,10 @@ on:
       - ".github/workflows/release.yml"
   workflow_dispatch:
 
+concurrency:
+  group: release-build-${{ github.ref }}
+  cancel-in-progress: ${{ !startsWith(github.ref, 'refs/tags/') }}
+
 permissions:
   contents: write
   pull-requests: write
@@ -29,6 +34,7 @@ jobs:
   desktop:
     name: Desktop ${{ matrix.name }}
     runs-on: ${{ matrix.os }}
+    timeout-minutes: 45
     strategy:
       fail-fast: false
       matrix:
@@ -117,6 +123,13 @@ jobs:
         with:
           targets: ${{ matrix.target }}
 
+      - name: Cache Rust build artifacts
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: |
+            . -> target
+            apps/omninova-tauri/src-tauri -> target
+
       - name: Install Linux system dependencies
         if: runner.os == 'Linux'
         run: |
@@ -163,7 +176,9 @@ jobs:
           if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
             VERSION="${GITHUB_REF_NAME#v}"
           else
-            VERSION="sha-${GITHUB_SHA::7}"
+            BRANCH_NAME="${GITHUB_REF_NAME:-branch}"
+            SANITIZED_BRANCH=$(echo "$BRANCH_NAME" | tr '[:upper:]' '[:lower:]' | sed 's#[^a-z0-9._-]#-#g')
+            VERSION="${SANITIZED_BRANCH}-sha-${GITHUB_SHA::7}"
           fi
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
 
@@ -245,6 +260,7 @@ jobs:
     needs:
       - desktop
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     permissions:
       contents: write
 
@@ -266,6 +282,7 @@ jobs:
         with:
           generate_release_notes: true
           prerelease: ${{ contains(github.ref_name, '-') }}
+          overwrite_files: true
           files: |
             release-assets/**
             release-assets/SHA256SUMS.txt