Zhengchao An 95c926dc79 ci(release): delete preview releases after the deliverable publishes (#6729) ...

Preview tags stay as the traceability record for the validated commit, but their GitHub Releases are internal validation state and should not accumulate on the Releases page next to real deliverables.

Add a cleanup-preview-releases job that runs after publish-release succeeds for a release or prerelease tag and deletes every Release whose tag is exactly <target>-preview.<digits>. The tags themselves are kept: the job never passes --cleanup-tag. Tag matching uses jq string operations rather than a regex over the version, so dots in the version cannot widen the match, and the release listing is fetched before filtering so an API failure aborts the job instead of looking like there was nothing to clean up.

Extend the preview release workflow guard with the job condition, the delete invocation, both tag-matching filters, and an absent check for --cleanup-tag.

2026-08-27 16:18:05 +08:00

..

check_cache_save_if.sh

ci: align cache writer and reader keys (#6398)

2026-08-23 01:44:50 +08:00

check_container_scan_workflow.sh

ci(docker): add release image scan report (#3382)

2026-06-12 13:11:59 +08:00

check_job_timeouts.sh

ci: bound every job's runtime and stop pasting inputs into shell (#5537)

2026-08-01 11:25:26 +08:00

check_performance_ab_workflow.sh

fix(ci): make Warp ABBA evidence bounded and complete (#6417)

2026-08-23 20:20:01 +08:00

check_persist_credentials.sh

ci: preserve failure verdict before early stop (#6552)

2026-08-25 04:33:16 +08:00

check_preview_release_workflow.sh

ci(release): delete preview releases after the deliverable publishes (#6729)

2026-08-27 16:18:05 +08:00

check_workflow_pins.sh

ci(audit): report unpinned workflow actions (#3379)

2026-06-12 11:33:23 +08:00

generate_release_supply_chain_assets.py

ci(release): emit sbom and provenance assets (#3381)

2026-06-12 12:56:02 +08:00