fix(release): upload only packaged artifacts

Signed-off-by: JSONbored <49853598+JSONbored@users.noreply.github.com>

Author: JSONbored

.github/workflows/release.yml

@@ -141,7 +141,10 @@ jobs:
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release-${{ matrix.os }}-${{ matrix.target }}
-          path: dist/nightward_*
+          path: |
+            dist/nightward_*.tar.gz
+            dist/nightward_*.zip
+            dist/nightward_*.sbom.json
           if-no-files-found: error
 
   publish:

scripts/test-release-scripts.sh

@@ -31,6 +31,12 @@ grep -q "macos-15-intel" "${repo_root}/.github/workflows/release.yml"
 grep -q "aarch64-unknown-linux-gnu" "${repo_root}/.github/workflows/release.yml"
 grep -q "x86_64-apple-darwin" "${repo_root}/.github/workflows/release.yml"
 grep -q 'NIGHTWARD_VERSION="${version}"' "${repo_root}/.github/workflows/release.yml"
+grep -q "dist/nightward_\\*.tar.gz" "${repo_root}/.github/workflows/release.yml"
+grep -q "dist/nightward_\\*.zip" "${repo_root}/.github/workflows/release.yml"
+if grep -q "path: dist/nightward_\\*" "${repo_root}/.github/workflows/release.yml"; then
+  echo "expected release upload to exclude staging directories" >&2
+  exit 1
+fi
 
 mkdir -p "${tmp}/target/release"
 printf '#!/usr/bin/env bash\nprintf "0.1.0\\n"\n' >"${tmp}/target/release/nightward"