Fixed windows CI command error

Author: DebaA17

.github/workflows/release.yml

@@ -65,20 +65,48 @@ jobs:
       - name: Package release artifact
         shell: bash
         run: |
-          mkdir -p release
-
-          ZIP_NAME="cvecli-${VERSION}-${{ matrix.asset }}.zip"
-
-          cp "dist/${{ matrix.exe }}" release/
-          cp README.md release/
-          cp LICENSE release/
-
-          cd release
-          zip -r "../$ZIP_NAME" .
-
-          cd ..
-
-          python -c 'import hashlib, pathlib, sys; p=pathlib.Path(sys.argv[1]); sha=hashlib.sha256(p.read_bytes()).hexdigest(); open("checksums.txt","a",encoding="utf-8").write(f"{sha}  {p.name}\\n")' "$ZIP_NAME"
+          python - <<'PY'
+          import hashlib
+          import os
+          import pathlib
+          import zipfile
+
+          version = os.environ["VERSION"]
+          asset = os.environ["ASSET"]
+          exe = os.environ["EXE"]
+
+          repo = pathlib.Path(".").resolve()
+          dist_exe = repo / "dist" / exe
+          if not dist_exe.exists():
+            raise SystemExit(f"missing built binary: {dist_exe}")
+
+          zip_name = f"cvecli-{version}-{asset}.zip"
+          zip_path = repo / zip_name
+
+          def sha256_file(path: pathlib.Path) -> str:
+            h = hashlib.sha256()
+            with path.open("rb") as f:
+              for chunk in iter(lambda: f.read(1024 * 1024), b""):
+                h.update(chunk)
+            return h.hexdigest()
+
+          files = [
+            (dist_exe, exe),
+            (repo / "README.md", "README.md"),
+            (repo / "LICENSE", "LICENSE"),
+          ]
+
+          with zipfile.ZipFile(zip_path, "w", compression=zipfile.ZIP_DEFLATED) as zf:
+            for src, arc in files:
+              zf.write(src, arcname=arc)
+
+          sha = sha256_file(zip_path)
+          (repo / "checksums.txt").write_text(f"{sha}  {zip_name}\n", encoding="utf-8")
+          print(f"Wrote {zip_name} and checksums.txt")
+          PY
+        env:
+          ASSET: ${{ matrix.asset }}
+          EXE: ${{ matrix.exe }}
 
       - name: Upload artifact
         uses: actions/upload-artifact@v4