fix(release): harden windows packaging with mirrors and portable target

Author: FallingAKS

.github/workflows/release-on-tag.yml

@@ -11,6 +11,9 @@ permissions:
 jobs:
   build-windows:
     runs-on: windows-latest
+    env:
+      ELECTRON_MIRROR: https://npmmirror.com/mirrors/electron/
+      ELECTRON_BUILDER_BINARIES_MIRROR: https://npmmirror.com/mirrors/electron-builder-binaries/
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -36,8 +39,9 @@ jobs:
           name: release-win-assets
           path: |
             frontend/dist-electron/*.exe
-            frontend/dist-electron/*.msi
             frontend/dist-electron/*.zip
+            frontend/dist-electron/latest*.yml
+            frontend/dist-electron/*.blockmap
           if-no-files-found: warn
 
   release:

.gitignore

@@ -18,6 +18,7 @@ backend/app/target/
 
 # frontend build artifacts
 frontend/dist/
+frontend/dist-electron/
 frontend/node_modules/
 
 # local editor/system files

docs/release-checklist.md

@@ -138,7 +138,7 @@ Run in order:
 5. **Verify GitHub Release metadata and assets**
    - `v3.0.4` exists in Releases
    - Title/tag/target branch/release notes are correct
-   - Windows downloadable assets are attached (`exe/msi/zip`)
+   - Windows downloadable assets are attached (portable `exe`, and optional `zip`)
 6. **Verify runtime surface health**
    - `http://localhost:8080/docs` returns `200`
    - `http://localhost:8080/redoc` returns `200`

docs/release-tagging.md

@@ -36,7 +36,7 @@ npm run release:tag -- -Version v3.0.4 -Push -CreateRelease
 
 - 工作流：`.github/workflows/release-on-tag.yml`
 - 触发条件：push `v*` tag
-- 行为：自动创建 GitHub Release，并开启自动 Release Notes；同时自动构建并挂载 Windows 安装包（`exe/msi/zip`）
+- 行为：自动创建 GitHub Release，并开启自动 Release Notes；同时自动构建并挂载 Windows 下载包（优先 `portable exe`，按目标可能附带 `zip`）
 - 若 tag 名含 `-rc/-beta/-alpha`，自动标记为 pre-release
 
 ## 5. 失败处理

docs/releases/README.md

@@ -13,3 +13,4 @@ This directory stores release-facing documents:
 - [v1.46.2 validation report](./v1.46.2-validation.md)
 - [v3.0.4 release notes](./v3.0.4.md)
 - [v3.0.5 release notes](./v3.0.5.md)
+- [v3.0.6 release notes](./v3.0.6.md)

docs/releases/v3.0.6.md

@@ -0,0 +1,41 @@
+# Release Notes: v3.0.6
+
+Release date: 2026-02-20
+
+## Highlights
+
+- Stabilized Windows release packaging pipeline for tagged releases:
+  - Added mirror-based download configuration in CI for Electron binaries and builder resources.
+  - Avoided flaky targets and switched to portable-first Windows distribution.
+- Hardened desktop packaging config:
+  - Disabled executable sign/edit step for unsigned build flow.
+  - Removed IA32 build target from Windows packaging.
+  - Removed hard dependency on missing local icon files for Windows packaging.
+- Completed release documentation sync:
+  - Updated EN/ZH checklists to match actual downloadable asset shape.
+
+## Why This Release Matters
+
+- Reduces transient network failures during tag-triggered release builds.
+- Produces a user-downloadable Windows package path that is more deterministic.
+- Keeps release checklist aligned with real artifact output.
+
+## Verification Snapshot
+
+- Local packaging validation:
+  - `npm run dist:win` succeeds with:
+    - `ELECTRON_MIRROR=https://npmmirror.com/mirrors/electron/`
+    - `ELECTRON_BUILDER_BINARIES_MIRROR=https://npmmirror.com/mirrors/electron-builder-binaries/`
+- CI workflow:
+  - `.github/workflows/release-on-tag.yml` includes mirror env and Windows artifact upload.
+
+## Included Changes
+
+- `ci(release): attach windows distributables to tag releases` (`897489d7`)
+- Packaging hardening and mirror strategy (this release series)
+- Release checklist alignment in EN/ZH (this release series)
+
+## Upgrade Notes
+
+- Recommended distribution baseline tag: `v3.0.6`.
+- Downloadable asset expectation: portable Windows `exe` (optional `zip` depending on target output).

docs/zh/release-checklist.md

@@ -138,7 +138,7 @@ git log --oneline -n 15
 5. **确认 Release 页面元数据**
    - `Releases` 页面存在 `v3.0.4`
    - 标题、Tag、目标分支、发布说明内容一致
-   - 已附带 Windows 下载包（`exe/msi/zip`）
+   - 已附带 Windows 下载包（优先 portable `exe`，按目标可能含 `zip`）
 6. **确认核心访问面健康**
    - `http://localhost:8080/docs` 返回 `200`
    - `http://localhost:8080/redoc` 返回 `200`

docs/zh/releases/README.md

@@ -13,3 +13,4 @@
 - [v1.46.2 验证报告](./v1.46.2-validation.md)
 - [v3.0.4 发布说明](./v3.0.4.md)
 - [v3.0.5 发布说明](./v3.0.5.md)
+- [v3.0.6 发布说明](./v3.0.6.md)

docs/zh/releases/v3.0.6.md

@@ -0,0 +1,33 @@
+# 发布说明：v3.0.6
+
+发布日期：2026-02-20
+
+## 核心更新
+
+- 发布工作流的 Windows 打包链路稳定性增强：
+  - 在 CI 中增加 Electron 与 builder 资源镜像源配置，降低下载超时风险。
+  - 采用 portable 优先的 Windows 分发策略。
+- 桌面打包配置加固：
+  - 关闭无签名场景下的可执行文件签名/编辑步骤。
+  - 移除 Windows IA32 打包目标。
+  - 去除对缺失图标文件的硬依赖，避免构建中断。
+- 发布文档同步：
+  - 中英文核验清单统一为“portable exe（可选 zip）”资产描述。
+
+## 价值说明
+
+- Tag 触发发布时更容易稳定产出可下载版本。
+- 减少网络波动导致的发版失败。
+- 文档说明与真实产物一致，降低执行偏差。
+
+## 验证摘要
+
+- 本地验证：
+  - 在镜像环境变量下，`npm run dist:win` 可成功执行。
+- CI 配置：
+  - `.github/workflows/release-on-tag.yml` 已包含镜像环境变量与 Windows 产物上传。
+
+## 建议基线
+
+- 建议用于对外分发的基线标签：`v3.0.6`
+- 预期下载产物：Windows portable `exe`（按目标可能附带 `zip`）

frontend/package.json

@@ -109,15 +109,8 @@
       }
     },
     "win": {
-      "icon": "build/icon.ico",
+      "signAndEditExecutable": false,
       "target": [
-        {
-          "target": "nsis",
-          "arch": [
-            "x64",
-            "ia32"
-          ]
-        },
         {
           "target": "portable",
           "arch": [
@@ -132,9 +125,6 @@
       "oneClick": false,
       "allowToChangeInstallationDirectory": true,
       "allowElevation": true,
-      "installerIcon": "build/icon.ico",
-      "uninstallerIcon": "build/icon.ico",
-      "installerHeaderIcon": "build/icon.ico",
       "createDesktopShortcut": true,
       "createStartMenuShortcut": true,
       "shortcutName": "Moqui ERP",