ci(github workflows): update release pipeline configuration

- remove redundant line ending normalization comment and empty lines
- update regex pattern to more accurately extract changelog content
- simplify log output and remove extra character cleaning steps
- improve github output writing with utf8NoBOM encoding
- add fallback logic when no changelog content is found
- simplify release body to use extracted changelog instead of hardcoded template
- refactor microsoft store auth step: pass secrets via env vars, add debug logs and manual token test
- update msstore command to use environment variables instead of direct secrets reference

Author: sunquakes

.github/workflows/release.yml

@@ -35,8 +35,6 @@ jobs:
         shell: pwsh
         run: |
           $content = Get-Content CHANGELOG.md -Raw
-          
-          # Normalize line endings
           $content = $content -replace "`r`n", "`n"
           
           if ($content -match '##\s*\[(\d+\.\d+\.\d+)\]\s*-\s*\d{4}-\d{2}-\d{2}') {
@@ -48,16 +46,16 @@ jobs:
             exit 1
           }
           
-          $pattern = '(?s)##\s*\[\d+\.\d+\.\d+\].*?\n(.*?)(?=\n##|\Z)'
+          $pattern = '(?s)(## \[.*?\].*?)(?=\n---|\Z)'
           if ($content -match $pattern) {
             $changelogContent = $matches[1].Trim()
-            $changelogContent = $changelogContent -replace '### ', '' -replace '\*\*', '' -replace '\* ', '- ' -replace '\n\n', "`n" -replace '\n\n\n', "`n"
-            $changelogContent = $changelogContent.Substring(0, [Math]::Min(500, $changelogContent.Length))
-            
             Write-Host "Extracted changelog (first 200 chars): $($changelogContent.Substring(0, [Math]::Min(200, $changelogContent.Length)))"
-            "CHANGELOG<<EOF" >> $env:GITHUB_OUTPUT
-            $changelogContent >> $env:GITHUB_OUTPUT
-            "EOF" >> $env:GITHUB_OUTPUT
+            "CHANGELOG<<EOF" | Out-File -FilePath $env:GITHUB_OUTPUT -Append -Encoding utf8NoBOM
+            $changelogContent | Out-File -FilePath $env:GITHUB_OUTPUT -Append -Encoding utf8NoBOM
+            "EOF" | Out-File -FilePath $env:GITHUB_OUTPUT -Append -Encoding utf8NoBOM
+          } else {
+            Write-Host "No changelog content found"
+            "CHANGELOG=" >> $env:GITHUB_OUTPUT
           }
 
   build-installer:
@@ -387,18 +385,7 @@ jobs:
         with:
           tag_name: v${{ needs.extract-version.outputs.version }}
           name: DevTools v${{ needs.extract-version.outputs.version }}
-          body: |
-            ${{ needs.extract-version.outputs.changelog }}
-            
-            ## Downloads
-            
-            ### Installers
-            - DevTools-win-x86.exe - Windows 32-bit installer
-            - DevTools-win-x64.exe - Windows 64-bit installer
-            - DevTools-win-arm64.exe - Windows ARM64 installer
-            
-            ### MSIX Bundle
-            - DevTools_${{ needs.extract-version.outputs.version }}_bundle.msixbundle - Microsoft Store package (includes x64, x86, arm64)
+          body: ${{ needs.extract-version.outputs.changelog }}
           draft: false
           prerelease: false
           files: |
@@ -447,12 +434,45 @@ jobs:
 
       - name: Reconfigure store credentials
         shell: pwsh
+        env:
+          AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
+          AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
+          AZURE_CLIENT_SECRET: ${{ secrets.AZURE_CLIENT_SECRET }}
+          SELLER_ID: ${{ secrets.SELLER_ID }}
         run: |
+          Write-Host "=== Debug: Checking secrets ==="
+          Write-Host "AZURE_TENANT_ID exists: $([bool]$env:AZURE_TENANT_ID)"
+          Write-Host "AZURE_CLIENT_ID exists: $([bool]$env:AZURE_CLIENT_ID)"
+          Write-Host "AZURE_CLIENT_SECRET exists: $([bool]$env:AZURE_CLIENT_SECRET)"
+          Write-Host "SELLER_ID exists: $([bool]$env:SELLER_ID)"
+          
+          Write-Host "`n=== Testing Azure AD token manually ==="
+          $tokenBody = @{
+            grant_type    = "client_credentials"
+            client_id     = $env:AZURE_CLIENT_ID
+            client_secret = $env:AZURE_CLIENT_SECRET
+            resource      = "https://manage.devcenter.microsoft.com"
+          }
+          try {
+            $tokenResponse = Invoke-RestMethod -Uri "https://login.microsoftonline.com/$env:AZURE_TENANT_ID/oauth2/token" -Method POST -Body $tokenBody
+            Write-Host "✓ Token obtained successfully"
+            Write-Host "Token type: $($tokenResponse.token_type)"
+            Write-Host "Expires in: $($tokenResponse.expires_in) seconds"
+          } catch {
+            Write-Host "✗ Token request failed:"
+            Write-Host "Error: $($_.Exception.Message)"
+            if ($_.Exception.Response) {
+              $reader = [System.IO.StreamReader]::new($_.Exception.Response.GetResponseStream())
+              Write-Host "Response: $($reader.ReadToEnd())"
+            }
+          }
+          
+          Write-Host "`n=== Running msstore reconfigure ==="
           msstore reconfigure `
-            --tenantId ${{ secrets.AZURE_TENANT_ID }} `
-            --sellerId ${{ secrets.SELLER_ID }} `
-            --clientId ${{ secrets.AZURE_CLIENT_ID }} `
-            --clientSecret ${{ secrets.AZURE_CLIENT_SECRET }}
+            --tenantId $env:AZURE_TENANT_ID `
+            --sellerId $env:SELLER_ID `
+            --clientId $env:AZURE_CLIENT_ID `
+            --clientSecret $env:AZURE_CLIENT_SECRET
 
       - name: Publish MSIX bundle to Store
         shell: pwsh