feat: add GitHub release automation script for v1.0.4 tags

Author: qectorlab

scripts/publish_github_releases.py

@@ -0,0 +1,71 @@
+#!/usr/bin/env python3
+"""
+publish_github_releases.py — Publishes v1.0.4 GitHub Releases with release notes and binary assets.
+"""
+import os
+import sys
+import subprocess
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+DIST_ASSETS = ROOT / "dist" / "release_assets"
+
+REPOS = {
+    "qectorlab/qector-decoder-workbench-linux": {
+        "title": "QECTOR Decoder Workbench v1.0.4 (Linux Release)",
+        "notes": "Official Linux distribution release for QECTOR Decoder Workbench v1.0.4 containing .deb package, portable .tar.gz, AppImage layout, Flatpak manifest, Snapcraft spec, RPM spec, SPDX SBOM, and SLSA Level 3 provenance attestation.",
+        "assets": [
+            DIST_ASSETS / "QectorWorkbench-v1.0.4-Linux-x64-Public.tar.gz",
+            DIST_ASSETS / "qector-workbench_1.0.4_sbom.json",
+            DIST_ASSETS / "attestation.intoto.jsonl",
+            DIST_ASSETS / "SHA256SUMS.txt"
+        ]
+    },
+    "qectorlab/qector-decoder-workbench-macos": {
+        "title": "QECTOR Decoder Workbench v1.0.4 (macOS Release)",
+        "notes": "Official macOS distribution release for QECTOR Decoder Workbench v1.0.4 containing drag-and-drop .dmg installer, .app bundle, universal tarball, SPDX SBOM, and SLSA Level 3 provenance attestation.",
+        "assets": [
+            DIST_ASSETS / "QectorWorkbench-v1.0.4-macOS-Universal.tar.gz",
+            DIST_ASSETS / "qector-workbench_1.0.4_sbom.json",
+            DIST_ASSETS / "attestation.intoto.jsonl",
+            DIST_ASSETS / "SHA256SUMS.txt"
+        ]
+    },
+    "iD01t/QECTOR-Workbench-MacOS": {
+        "title": "QECTOR Decoder Workbench v1.0.4 (macOS Release)",
+        "notes": "Official macOS distribution release for QECTOR Decoder Workbench v1.0.4 containing drag-and-drop .dmg installer, .app bundle, universal tarball, SPDX SBOM, and SLSA Level 3 provenance attestation.",
+        "assets": [
+            DIST_ASSETS / "QectorWorkbench-v1.0.4-macOS-Universal.tar.gz",
+            DIST_ASSETS / "qector-workbench_1.0.4_sbom.json",
+            DIST_ASSETS / "attestation.intoto.jsonl",
+            DIST_ASSETS / "SHA256SUMS.txt"
+        ]
+    }
+}
+
+def publish_releases():
+    print("========================================================================")
+    print(" Publishing GitHub Releases (v1.0.4) across Repositories")
+    print("========================================================================")
+
+    for repo, info in REPOS.items():
+        print(f"\nPublishing release v1.0.4 for repository: {repo}...")
+        cmd = [
+            "gh", "release", "create", "v1.0.4",
+            "--repo", repo,
+            "--title", info["title"],
+            "--notes", info["notes"],
+            "--latest"
+        ]
+        
+        valid_assets = [str(a) for a in info["assets"] if a.exists()]
+        cmd.extend(valid_assets)
+        
+        res = subprocess.run(cmd, capture_output=True, text=True)
+        if res.returncode == 0:
+            print(f"  [SUCCESS] Release published: {res.stdout.strip()}")
+        else:
+            print(f"  [INFO] Release response: {res.stdout.strip() or res.stderr.strip()}")
+
+if __name__ == "__main__":
+    publish_releases()