.github/workflows/ci.ymlrunsbun run lint,bun run typecheck, andbun run teston pull requests and pushes tomain..github/workflows/release.ymlbuilds macOS (arm64andx64), Linux (x64), and Windows (x64) desktop artifacts from a singlev*.*.*tag and publishes one GitHub release.- The release workflow auto-enables signing only when secrets are present: Apple credentials for macOS and Azure Trusted Signing credentials for Windows. Without secrets, it still releases unsigned artifacts.
- See Release Checklist for the full release/signing setup checklist.