fix(release): re-register PSGallery before Windows Artifact Signing

[AprilNEA]

Problem

The v0.6.14 Release run failed two jobs — Windows EXE (arm64) and Windows MSI (arm64) — so those two assets are missing from the published release. Everything else (macOS, Linux, Windows x86_64) shipped, and the GitHub Release published (the publish job is best-effort over Windows artifacts).

The arm64 EXE build succeeded; the signing step failed:

Install-Module -Name ArtifactSigning -RequiredVersion 0.1.8 -Force -Repository PSGallery
Get-PackageSource: Unable to find repository 'PSGallery'.
##[error]Process completed with exit code 1.

azure/artifact-signing-action@v2 installs its ArtifactSigning module from PSGallery at runtime. PSGallery is intermittently not registered on hosted windows runners (actions/runner-images#13758), so the action dies on a mis-provisioned VM. x86_64 landed on a healthy runner and signed fine — this is a transient infra flake, not a config bug.

The MSI (arm64) failure is a downstream cascade: it couldn't download the missing arm64 EXE artifact.

Fix

Re-register the default PSGallery before each azure/artifact-signing-action@v2 call (both the EXE and MSI Windows jobs):

if (-not (Get-PSRepository -Name PSGallery -ErrorAction SilentlyContinue)) {
  Register-PSRepository -Default
}

This is the workaround recommended in the runner-images issue. A mis-provisioned runner can no longer silently drop a release artifact.

Scope

• Does not retroactively fix v0.6.14 — releases are immutable; the Windows arm64 assets return on the next tagged release.
• YAML-only; no Rust touched.

[greptile-apps]

Greptile Summary

This PR adds a defensive PowerShell step to re-register PSGallery before each azure/artifact-signing-action@v2 call, working around an intermittent runner provisioning bug (actions/runner-images#13758) that caused both Windows arm64 signing jobs to fail for v0.6.14.

• The guard (if (-not (Get-PSRepository ...)) { Register-PSRepository -Default }) is idempotent — it only registers PSGallery when it is absent, avoiding a "repository already exists" error on healthy runners.
• Both affected jobs (windows EXE and windows-msi) have the step added in the correct position (after Azure OIDC login, before the signing action), with cross-referencing comments.

Confidence Score: 5/5

YAML-only change; no Rust or application logic touched. The new step is a well-known workaround for a documented runner provisioning flake and is correctly placed and idempotent.

The two added steps exactly match the workaround recommended for actions/runner-images#13758. The conditional guard prevents double-registration on healthy runners, and the step is placed correctly in both jobs — after the Azure login that the signing action depends on, and before the signing action itself. No logic paths are altered for the happy case.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/release.yml	Adds a PSGallery re-registration guard before each azure/artifact-signing-action@v2 call in both the windows (EXE) and windows-msi (MSI) jobs; logic is correct, idempotent, and well-commented.

Sequence Diagram

sequenceDiagram
    participant Runner as Windows Runner
    participant Guard as Ensure PSGallery step (NEW)
    participant PSGallery as PSGallery
    participant SignAction as azure/artifact-signing-action@v2
    participant AzureSign as Azure Artifact Signing

    Runner->>Guard: Execute pwsh guard
    Guard->>PSGallery: Get-PSRepository -Name PSGallery
    alt PSGallery not registered (flaky runner)
        PSGallery-->>Guard: $null
        Guard->>PSGallery: Register-PSRepository -Default
        PSGallery-->>Guard: Registered ✓
    else PSGallery already registered (healthy runner)
        PSGallery-->>Guard: Repository info
        Guard-->>Guard: Skip (no-op)
    end
    Guard-->>Runner: Step succeeds
    Runner->>SignAction: Run signing action
    SignAction->>PSGallery: Install-Module ArtifactSigning
    PSGallery-->>SignAction: Module installed ✓
    SignAction->>AzureSign: Submit file for signing
    AzureSign-->>SignAction: Signed artifact ✓

Loading

_{Reviews (1): Last reviewed commit: "fix(release): re-register PSGallery befo..." | Re-trigger Greptile}