From c14399aab44468aa1020075e1f9d54b9a8548c4e Mon Sep 17 00:00:00 2001
From: Tym Rabchuk <tymrabchuk@gmail.com>
Date: Thu, 9 Apr 2026 20:45:30 -0400
Subject: [PATCH] Fix publish job: cd to /tmp broke gh release upload (not a
 git repo)

Use subshell for sha256sum generation and keep gh commands in the
checkout directory where git context is available.
---
 .github/workflows/release.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ca2afea..048eaa1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -201,10 +201,8 @@ jobs:
           TAG="v${{ needs.version.outputs.version }}"
           mkdir -p /tmp/release-assets
           gh release download "$TAG" --dir /tmp/release-assets
-          cd /tmp/release-assets
-          sha256sum devkit-* > checksums.txt
-          cat checksums.txt
-          gh release upload "$TAG" checksums.txt --clobber
+          (cd /tmp/release-assets && sha256sum devkit-* > checksums.txt && cat checksums.txt)
+          gh release upload "$TAG" /tmp/release-assets/checksums.txt --clobber
 
       - name: Publish release
         env: