Restructure the release workflow so the GitHub Release becomes an atomic publish point gated on every prerequisite (tests, installer build, release notes, and a signed OpenUPM package).
Goals
- Add
prepare-release-notes to generate release.md in parallel and upload it as the release-notes artifact.
- Add
build-signed-upm-package that signs com.ivanmurzak.unity.mcp.particlesystem with Unity's UPM CLI and uploads the signed .tgz. This is a HARD GATE — missing signing secrets or a signing failure halts the pipeline and no release is created.
- Rewrite
release-unity-plugin into a single softprops/action-gh-release@v2 call that downloads all asset artifacts (installer .unitypackage + signed .tgz) and the release notes, attaching everything in one atomic step with fail_on_unmatched_files: true.
- Remove the separate
publish-unity-installer post-release job; re-point cleanup-artifacts accordingly.
- Add
docs/openupm-signing.md.
Mirrors what was merged into the parent Unity-MCP repo (#776 + #777 combined).
Restructure the release workflow so the GitHub Release becomes an atomic publish point gated on every prerequisite (tests, installer build, release notes, and a signed OpenUPM package).
Goals
prepare-release-notesto generaterelease.mdin parallel and upload it as therelease-notesartifact.build-signed-upm-packagethat signscom.ivanmurzak.unity.mcp.particlesystemwith Unity's UPM CLI and uploads the signed.tgz. This is a HARD GATE — missing signing secrets or a signing failure halts the pipeline and no release is created.release-unity-plugininto a singlesoftprops/action-gh-release@v2call that downloads all asset artifacts (installer.unitypackage+ signed.tgz) and the release notes, attaching everything in one atomic step withfail_on_unmatched_files: true.publish-unity-installerpost-release job; re-pointcleanup-artifactsaccordingly.docs/openupm-signing.md.Mirrors what was merged into the parent Unity-MCP repo (#776 + #777 combined).