From 50711ae06dd790e953adee96e9d36383d8c8f39f Mon Sep 17 00:00:00 2001
From: TsunamiNoAi <spam@falseblue.com>
Date: Sat, 6 Jun 2026 10:31:08 -0400
Subject: [PATCH 1/4] Update release workflow to use 'gh release create' for
 artifact uploads and checksum generation

---
 .github/workflows/release.yml | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d0c2fcd..c44ae34 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -75,12 +75,13 @@ jobs:
           cd dist
           sha256sum *.tar.gz > checksums.txt
 
-      - uses: softprops/action-gh-release@v2
-        with:
-          files: |
-            dist/*.tar.gz
-            dist/checksums.txt
-          generate_release_notes: true
+      - name: Create release
+        run: |
+          gh release create "${{ github.ref_name }}" \
+            dist/*.tar.gz dist/checksums.txt \
+            --generate-notes
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   flakehub-publish:
     needs: release

From 168434ab2b71789c8ddd4b5cbf5b1c8a51faf88e Mon Sep 17 00:00:00 2001
From: TsunamiNoAi <spam@falseblue.com>
Date: Sat, 6 Jun 2026 10:34:21 -0400
Subject: [PATCH 2/4] Update regression protection rules to include only the
 default branch

---
 .github/rulesets/regression-protection.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/rulesets/regression-protection.json b/.github/rulesets/regression-protection.json
index a536672..49fbec7 100644
--- a/.github/rulesets/regression-protection.json
+++ b/.github/rulesets/regression-protection.json
@@ -5,7 +5,7 @@
   "conditions": {
     "ref_name": {
       "exclude": [],
-      "include": ["~ALL"]
+      "include": ["~DEFAULT_BRANCH"]
     }
   },
   "rules": [

From f3932dfb4dbf40e9133e5906ec05216d38b084a4 Mon Sep 17 00:00:00 2001
From: Ben Craton <ben@sc2.in>
Date: Sat, 6 Jun 2026 10:39:17 -0400
Subject: [PATCH 3/4] Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 .github/workflows/release.yml | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c44ae34..1f59403 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -75,13 +75,24 @@ jobs:
           cd dist
           sha256sum *.tar.gz > checksums.txt
 
-      - name: Create release
-        run: |
-          gh release create "${{ github.ref_name }}" \
-            dist/*.tar.gz dist/checksums.txt \
-            --generate-notes
+      - name: Create / update release
+        if: startsWith(github.ref, 'refs/tags/')
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+
+          TAG="${{ github.ref_name }}"
+          REPO="${{ github.repository }}"
+
+          if gh release view "$TAG" --repo "$REPO" >/dev/null 2>&1; then
+            gh release edit "$TAG" --repo "$REPO" --draft=true
+          else
+            gh release create "$TAG" --repo "$REPO" --draft --generate-notes
+          fi
+
+          gh release upload "$TAG" --repo "$REPO" dist/*.tar.gz dist/checksums.txt --clobber
+          gh release edit "$TAG" --repo "$REPO" --draft=false
 
   flakehub-publish:
     needs: release

From 3bdc289a72385c6487cdaee0dbaa06764dc49553 Mon Sep 17 00:00:00 2001
From: TsunamiNoAi <spam@falseblue.com>
Date: Sat, 6 Jun 2026 10:55:03 -0400
Subject: [PATCH 4/4] fix: correct required status check names in
 regression-protection ruleset
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Remove the erroneous 'CI / ' prefix — GitHub Actions reports check names
without the workflow name prefix when jobs have an explicit name: override.
---
 .github/rulesets/regression-protection.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/rulesets/regression-protection.json b/.github/rulesets/regression-protection.json
index 49fbec7..466d937 100644
--- a/.github/rulesets/regression-protection.json
+++ b/.github/rulesets/regression-protection.json
@@ -16,10 +16,10 @@
         "strict_required_status_checks_policy": false,
         "do_not_enforce_on_create": true,
         "required_status_checks": [
-          { "context": "CI / build (x86_64-linux)" },
-          { "context": "CI / build (aarch64-linux)" },
-          { "context": "CI / wasm" },
-          { "context": "CI / bench-regression" }
+          { "context": "build (x86_64-linux)" },
+          { "context": "build (aarch64-linux)" },
+          { "context": "wasm" },
+          { "context": "bench-regression" }
         ]
       }
     }