chore(release): move macOS note to release body footer

Author: linshenkx

docs/project/release-notes.md

@@ -110,21 +110,15 @@ pnpm version:publish
 
 - 英文区块
   - `Summary`
-  - `macOS Security Note`
   - 安装文档链接
   - 英文全文链接
 - 中文区块
   - `概括`
-  - `macOS 安全提示`
   - 安装文档链接
   - 中文全文链接
+- 末尾轻量 macOS 备注
 
-其中 `macOS Security Note / macOS 安全提示` 为固定内容，用来明确说明：
-
-- “已损坏”
-- “无法验证开发者”
-
-这类提示通常来自 macOS 的隔离属性，不一定是应用本身损坏。
+末尾 macOS 备注可以完整说明隔离属性的现象和处理命令；因为它放在正文最后，不会压过发布摘要。
 
 如果历史版本缺少概括，渲染逻辑可以回退为全文；但正式发布流程会被校验阻塞。
 

scripts/release-notes.js

@@ -539,10 +539,18 @@ function buildTagScopedFileUrl(repository, tag, relativePath) {
 
 function renderMacSecurityNote(locale) {
   if (locale === 'en') {
-    return '> macOS note: if the app is reported as damaged or unverified, remove quarantine with `xattr -rd com.apple.quarantine /Applications/PromptOptimizer.app` (or run it on `~/Downloads/PromptOptimizer-*.dmg` before installing).';
+    return [
+      'macOS note: if macOS reports the app as damaged or cannot verify the developer, this is usually caused by the quarantine attribute on downloaded apps. See the installation guide, or remove it after installing with `xattr -rd com.apple.quarantine /Applications/PromptOptimizer.app`; for a downloaded DMG, you can run the same command on `~/Downloads/PromptOptimizer-*.dmg` before installing.',
+    ].join('\n');
+  }
+
+  if (locale === 'zh-CN') {
+    return [
+      'macOS 备注：如果 macOS 提示“已损坏”或“无法验证开发者”，通常是下载文件的隔离属性导致。请参考安装文档；也可以在安装后执行 `xattr -rd com.apple.quarantine /Applications/PromptOptimizer.app`，或在安装前对 `~/Downloads/PromptOptimizer-*.dmg` 执行同类命令。',
+    ].join('\n');
   }
 
-  return '> macOS 提示：如果提示“已损坏”或“无法验证开发者”，可用 `xattr -rd com.apple.quarantine /Applications/PromptOptimizer.app` 移除隔离属性；DMG 可先对 `~/Downloads/PromptOptimizer-*.dmg` 执行。';
+  return [renderMacSecurityNote('en'), renderMacSecurityNote('zh-CN')].join('\n');
 }
 
 function renderGitHubReleaseBody({ cwd = process.cwd(), version, repository }) {
@@ -565,8 +573,6 @@ function renderGitHubReleaseBody({ cwd = process.cwd(), version, repository }) {
       '### Summary',
       englishSummary,
       '',
-      renderMacSecurityNote('en'),
-      '',
       `Installation guide: [English](${englishGuideUrl}) | [中文](${chineseGuideUrl})`,
       `[Full release notes (EN)](${buildTagScopedFileUrl(repository, tag, getReleaseNotesRelativePath(normalizedVersion, 'en', cwd))})`,
       '',
@@ -577,11 +583,13 @@ function renderGitHubReleaseBody({ cwd = process.cwd(), version, repository }) {
       '### 概括',
       chineseSummary,
       '',
-      renderMacSecurityNote('zh-CN'),
-      '',
       `安装文档：[English](${englishGuideUrl}) | [中文](${chineseGuideUrl})`,
       `[完整发布说明（中文）](${buildTagScopedFileUrl(repository, tag, getReleaseNotesRelativePath(normalizedVersion, 'zh-CN', cwd))})`,
       '',
+      '---',
+      '',
+      renderMacSecurityNote(),
+      '',
     ].join('\n');
   }
 

scripts/release-notes.test.mjs

@@ -348,7 +348,7 @@ test('validateReleaseArtifacts can validate a matching non-top changelog entry f
   assert.deepEqual(historicalResult.errors, []);
 });
 
-test('renderGitHubReleaseBody renders English first, then Chinese, with macOS note and guide links', () => {
+test('renderGitHubReleaseBody renders English first, then Chinese, with final macOS note and guide links', () => {
   const root = createTempRepo();
   writeFile(root, 'releases/v2.8.0.en.md', buildValidEnglishReleaseNotes('2.8.0'));
   writeFile(root, 'releases/v2.8.0.zh-CN.md', buildValidChineseReleaseNotes('2.8.0'));
@@ -361,15 +361,19 @@ test('renderGitHubReleaseBody renders English first, then Chinese, with macOS no
 
   assert.match(body, /^## English$/m);
   assert.match(body, /^### Summary$/m);
-  assert.match(body, /^### macOS Security Note$/m);
   assert.match(body, /^Installation guide: \[English\]\(https:\/\/github\.com\/linshenkx\/prompt-optimizer\/blob\/v2\.8\.0\/mkdocs\/docs\/en\/deployment\/desktop\.md\) \| \[中文\]\(https:\/\/github\.com\/linshenkx\/prompt-optimizer\/blob\/v2\.8\.0\/mkdocs\/docs\/zh\/deployment\/desktop\.md\)$/m);
   assert.match(body, /\[Full release notes \(EN\)\]\(https:\/\/github\.com\/linshenkx\/prompt-optimizer\/blob\/v2\.8\.0\/releases\/v2\.8\.0\.en\.md\)/);
   assert.match(body, /^---$/m);
   assert.match(body, /^## 中文$/m);
   assert.match(body, /^### 概括$/m);
-  assert.match(body, /^### macOS 安全提示$/m);
   assert.match(body, /^安装文档：\[English\]\(https:\/\/github\.com\/linshenkx\/prompt-optimizer\/blob\/v2\.8\.0\/mkdocs\/docs\/en\/deployment\/desktop\.md\) \| \[中文\]\(https:\/\/github\.com\/linshenkx\/prompt-optimizer\/blob\/v2\.8\.0\/mkdocs\/docs\/zh\/deployment\/desktop\.md\)$/m);
   assert.match(body, /\[完整发布说明（中文）\]\(https:\/\/github\.com\/linshenkx\/prompt-optimizer\/blob\/v2\.8\.0\/releases\/v2\.8\.0\.zh-CN\.md\)/);
+  assert.doesNotMatch(body, /^### macOS/m);
+  assert.match(body, /^macOS note: if macOS reports the app as damaged or cannot verify the developer, this is usually caused by the quarantine attribute on downloaded apps\./m);
+  assert.match(body, /^macOS 备注：如果 macOS 提示“已损坏”或“无法验证开发者”，通常是下载文件的隔离属性导致。/m);
+  assert.match(body, /xattr -rd com\.apple\.quarantine \/Applications\/PromptOptimizer\.app/);
+  assert.match(body, /~\/Downloads\/PromptOptimizer-\*\.dmg/);
+  assert.ok(body.lastIndexOf('macOS note:') > body.indexOf('[完整发布说明（中文）]'));
 });
 
 test('renderGitHubReleaseBody falls back to full text when summaries are absent', () => {