fix: harden split release flow and Chocolatey packaging checks #33

	name: Release

	on:
	push:
	tags:
	- "v*"

	jobs:
	release:
	name: Release
	runs-on: ubuntu-latest
	permissions:
	contents: write

	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: "1.24.4"

	# go-winres runs in GoReleaser's before hooks; it works on Linux and generates .syso for the Windows binary (icon + version info).
	- name: Install go-winres (for Windows icon embedding)
	run: go install github.com/tc-hib/go-winres@latest

	- name: Run tests
	run: go test ./...

	- name: Validate GoReleaser config
	uses: goreleaser/goreleaser-action@v6
	with:
	version: '~> v2'
	args: check

	# Main release flow: publish GitHub release + non-Chocolatey package managers.
	# Chocolatey is handled separately in chocolatey-release.yml with dedicated preflight checks.
	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@v6
	with:
	distribution: goreleaser
	version: '~> v2'
	args: release --clean --skip=chocolatey
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
	SCOOP_BUCKET_TOKEN: ${{ secrets.SCOOP_BUCKET_TOKEN }}
	WINGET_PR_TOKEN: ${{ secrets.WINGET_PR_TOKEN }}
	AUR_PRIVATE_KEY: ${{ secrets.AUR_PRIVATE_KEY }}

Provide feedback