i've spent two days reconfiguring our release process for - cli - desktop - signing both for mac/windows - publishing to aur, npm, winget, brew, etc - across stable, dev, beta this is so difficult to do while guarding against potential supply chain attacks