fix: create draft release before attaching artifacts to prevent incomplete downloads

release-please now creates a draft release, matrix builds upload all
artifacts to the draft, and a new publish-release job flips it to
published only after all platforms complete. This ensures /releases/latest
always points to a release with all assets attached.

Also removes the polling loop from update-homebrew since the release is
guaranteed to have all assets by the time that job runs.

https://claude.ai/code/session_01JFUTfGHH9TLrwHE1Z6spVJ
Signed-off-by: Claude <noreply@anthropic.com>

Author: claude

.github/workflows/release.yml

@@ -23,6 +23,7 @@ jobs:
       pull-requests: write
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
+      release_id: ${{ steps.release.outputs.id }}
       tag_name: ${{ steps.release.outputs.tag_name }}
       version: ${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }}.${{ steps.release.outputs.patch }}
     steps:
@@ -141,43 +142,42 @@ jobs:
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
         with:
           projectPath: apps/desktop
-          # Use tagName to find and upload to the existing release created by release-please
-          tagName: ${{ needs.release-please.outputs.tag_name }}
-          releaseName: 'McpMux v${{ needs.release-please.outputs.version }}'
-          releaseBody: ''  # Release notes already created by release-please
-          releaseDraft: false
-          prerelease: false
+          # Upload to the existing draft release created by release-please
+          releaseId: ${{ needs.release-please.outputs.release_id }}
           updaterJsonKeepUniversal: true
 
+  # ─────────────────────────────────────────────────────────────
+  # Publish Release: Flip draft → published after all artifacts
+  # are attached, so /releases/latest always has all assets
+  # ─────────────────────────────────────────────────────────────
+  publish-release:
+    needs: [release-please, build-release]
+    if: needs.release-please.outputs.release_created == 'true'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Publish release
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.repos.updateRelease({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              release_id: ${{ needs.release-please.outputs.release_id }},
+              draft: false,
+            });
+
   # ─────────────────────────────────────────────────────────────
   # Update Homebrew Tap: Push new version to homebrew-mcpmux
   # ─────────────────────────────────────────────────────────────
   update-homebrew:
-    needs: [release-please, build-release]
+    needs: [release-please, publish-release]
     if: needs.release-please.outputs.release_created == 'true'
     runs-on: ubuntu-latest
     permissions:
       contents: read
     steps:
-      - name: Wait for release assets
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          VERSION="${{ needs.release-please.outputs.version }}"
-          TAG="${{ needs.release-please.outputs.tag_name }}"
-          echo "Checking release assets for $TAG..."
-
-          # Wait up to 5 minutes for macOS DMGs to appear
-          for i in $(seq 1 30); do
-            ASSETS=$(gh api repos/${{ github.repository }}/releases/tags/$TAG --jq '.assets[].name' 2>/dev/null || echo "")
-            if echo "$ASSETS" | grep -q "aarch64.dmg" && echo "$ASSETS" | grep -q "x64.dmg"; then
-              echo "Both macOS DMGs found"
-              break
-            fi
-            echo "Waiting for macOS DMGs... (attempt $i/30)"
-            sleep 10
-          done
-
       - name: Compute SHA256 and update cask
         env:
           GH_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}

release-please-config.json

@@ -7,7 +7,7 @@
       "changelog-path": "CHANGELOG.md",
       "bump-minor-pre-major": true,
       "bump-patch-for-minor-pre-major": true,
-      "draft": false,
+      "draft": true,
       "prerelease": false,
       "include-component-in-tag": false,
       "extra-files": [