chore(ci): merge main into dependabot/docker/alpine-3.24

Bring the PR branch up to date with main so PR CI runs the fixed workflows.

Author: FasterEdge

.github/workflows/docker-image.yml

@@ -1,32 +1,49 @@
 name: 'Docker 镜像构建'
 on:
   workflow_dispatch:
+  pull_request:
   push:
+    branches:
+      - main
     tags:
       - 'v*'          # 打 v0.1.0 等标签时自动构建并产出镜像
+  release:
+    types: [published, released]
 permissions:
-  contents: read
+  contents: write
 
 jobs:
   docker-build:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
-    - name: 'Go 鍗曞厓娴嬭瘯'
+    - name: 'Go 单元测试'
       uses: actions/setup-go@v5
       with:
-        go-version: '1.25'
-    - name: '杩愯娴嬭瘯'
+        go-version: '1.26'
+    - name: '运行测试'
       run: go test ./...
     - name: '构建 Docker 镜像'
       run: |
         docker build -t simplewebshell-remoteupdate .
     - name: '导出并上传镜像工件'
       run: |
         docker save simplewebshell-remoteupdate | gzip > simplewebshell-remoteupdate-image.tar.gz
+    # PR 的 ref_name 形如 15/merge,dependabot 分支名也含斜杠,
+    # 而 upload-artifact 的工件名不允许出现 /,这里统一替换为连字符。
+    - name: '计算工件名'
+      shell: bash
+      run: echo "ARTIFACT_NAME=simplewebshell-remoteupdate-docker-image-${GITHUB_REF_NAME//\//-}" >> "$GITHUB_ENV"
     - uses: actions/upload-artifact@v4
       with:
-        name: 'simplewebshell-remoteupdate-docker-image-${{ github.ref_name }}'
+        name: ${{ env.ARTIFACT_NAME }}
         path: 'simplewebshell-remoteupdate-image.tar.gz'
         if-no-files-found: 'warn'
         retention-days: 14
+    - name: '上传镜像包到 Release'
+      if: github.event_name == 'release' || startsWith(github.ref, 'refs/tags/v')
+      uses: softprops/action-gh-release@v2
+      with:
+        tag_name: ${{ github.event.release.tag_name || github.ref_name }}
+        files: 'simplewebshell-remoteupdate-image.tar.gz'
+        fail_on_unmatched_files: false

.github/workflows/release.yml

@@ -0,0 +1,80 @@
+name: 'Release 打包'
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - 'v*'
+  release:
+    types: [published, released]
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    name: '构建 ${{ matrix.target }}'
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - { target: linux-amd64,   goos: linux,   goarch: amd64, ext: ''   }
+          - { target: linux-arm64,   goos: linux,   goarch: arm64, ext: ''   }
+          - { target: darwin-amd64,  goos: darwin,  goarch: amd64, ext: ''   }
+          - { target: darwin-arm64,  goos: darwin,  goarch: arm64, ext: ''   }
+          - { target: windows-amd64, goos: windows, goarch: amd64, ext: .exe }
+          - { target: windows-arm64, goos: windows, goarch: arm64, ext: .exe }
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-go@v5
+      with:
+        go-version: '1.26'
+    - name: '编译 ${{ matrix.target }}'
+      run: |
+        mkdir -p dist
+        CGO_ENABLED=0 GOOS=${{ matrix.goos }} GOARCH=${{ matrix.goarch }} \
+          go build -trimpath -ldflags="-s -w" -o dist/simplewebshell-remoteupdate${{ matrix.ext }} .
+    - name: '打包'
+      run: |
+        cd dist
+        if [ "${{ matrix.goos }}" = "windows" ]; then
+          zip -qr ../simplewebshell-remoteupdate-${{ matrix.target }}.zip simplewebshell-remoteupdate.exe
+        else
+          tar czf ../simplewebshell-remoteupdate-${{ matrix.target }}.tar.gz simplewebshell-remoteupdate
+        fi
+    - uses: actions/upload-artifact@v4
+      with:
+        name: 'simplewebshell-remoteupdate-${{ matrix.target }}'
+        path: '${{ github.workspace }}/simplewebshell-remoteupdate-${{ matrix.target }}.*'
+        if-no-files-found: 'error'
+        retention-days: 1
+
+  release:
+    name: '发布 GitHub Release'
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/download-artifact@v4
+      with:
+        path: artifacts
+        merge-multiple: true
+    - name: '整理产物'
+      run: |
+        mkdir -p release
+        find artifacts -type f \( -name '*.tar.gz' -o -name '*.zip' \) -exec cp {} release/ \;
+    - name: '生成 MD5/SHA1 校验文件'
+      run: |
+        set -euo pipefail
+        cd release
+        find . -type f ! -name 'checksums-md5.txt' ! -name 'checksums-sha1.txt' -print0 \
+          | sort -z | xargs -0 -r md5sum > checksums-md5.txt
+        find . -type f ! -name 'checksums-md5.txt' ! -name 'checksums-sha1.txt' -print0 \
+          | sort -z | xargs -0 -r sha1sum > checksums-sha1.txt
+    - name: '上传到 Release'
+      if: github.event_name != 'workflow_dispatch' || github.event.inputs.tag != ''
+      uses: softprops/action-gh-release@v2
+      with:
+        tag_name: ${{ github.event.inputs.tag || github.event.release.tag_name || github.ref_name }}
+        files: 'release/*'
+        generate_release_notes: true
+        fail_on_unmatched_files: false

main.go

@@ -16,7 +16,7 @@ import (
 	"github.com/FasterEdge/SimpleWebShell-RemoteUpdate/internal/workflow"
 )
 
-var version = "1.0.20260902"
+var version = "1.0.20261022"
 
 func main() {
 	os.Exit(run(os.Args[1:]))