From f8a176cdc544ad471c6909843914f368f5cacc54 Mon Sep 17 00:00:00 2001
From: PerishCode <perishcode@gmail.com>
Date: Thu, 9 Jul 2026 12:29:34 +0800
Subject: [PATCH 1/5] Add stable updater release notes

---
 .../scripts/release/github/stable-notes.sh    |   3 +-
 apps/packaged/package.json                    |   2 +-
 apps/web/src/components/UpdaterPopup.tsx      |  70 ++++++++++-
 apps/web/src/lib/updater.ts                   |  75 +++++++++++
 .../web/src/styles/workspace/mention-home.css |  24 ++++
 .../tests/components/UpdaterPopup.test.tsx    |  72 +++++++++++
 apps/web/tests/lib/updater.test.ts            |  54 ++++++++
 docs/CHANGELOG/v0.14.2/en.md                  |  10 ++
 docs/CHANGELOG/v0.14.2/zh-CN.md               |  10 ++
 e2e/tests/packaged-smoke-workflow.test.ts     |  13 ++
 tools/release/src/metadata/prepare-stable.ts  |   5 +
 tools/release/src/release-notes.ts            | 117 ++++++++++++++++++
 tools/release/src/storage/common.ts           |   1 +
 tools/release/src/storage/publish-metadata.ts |  27 ++++
 tools/release/src/storage/verify-metadata.ts  |  15 +++
 tools/release/tests/channel-prepare.test.ts   |  42 ++++++-
 tools/serve/src/index.ts                      |   9 ++
 tools/serve/src/updater-fixture.ts            | 101 +++++++++++++++
 .../tests/release-metadata-publish.test.ts    |  19 +++
 tools/serve/tests/updater-fixture.test.ts     |  41 ++++++
 20 files changed, 705 insertions(+), 5 deletions(-)
 create mode 100644 docs/CHANGELOG/v0.14.2/en.md
 create mode 100644 docs/CHANGELOG/v0.14.2/zh-CN.md
 create mode 100644 tools/release/src/release-notes.ts

diff --git a/.github/scripts/release/github/stable-notes.sh b/.github/scripts/release/github/stable-notes.sh
index 4eab3dfadba..3aad78683a4 100644
--- a/.github/scripts/release/github/stable-notes.sh
+++ b/.github/scripts/release/github/stable-notes.sh
@@ -28,7 +28,8 @@ cat > "$notes_file" <<EOF
 - branch: $BRANCH_NAME
 - commit: $GITHUB_SHA
 
-See [CHANGELOG.md](https://github.com/${GITHUB_REPOSITORY}/blob/$VERSION_TAG/CHANGELOG.md) for the full release notes.
+See [docs/CHANGELOG/v$RELEASE_VERSION/en.md](https://github.com/${GITHUB_REPOSITORY}/blob/$VERSION_TAG/docs/CHANGELOG/v$RELEASE_VERSION/en.md) for the English release notes.
+Updater release notes are published at $public_origin/$RELEASE_CHANNEL/versions/$RELEASE_VERSION/release-notes/en.md.
 
 This stable release ships mac arm64/x64 DMG and ZIP assets, Windows x64 NSIS installer assets, checksums, updater feed files, and a zipped packaged e2e spec report. Linux AppImage packaging remains optional through the stable Linux lane.
 EOF
diff --git a/apps/packaged/package.json b/apps/packaged/package.json
index 18e00f0557f..68ef8b9f3c8 100644
--- a/apps/packaged/package.json
+++ b/apps/packaged/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@open-design/packaged",
-  "version": "0.14.1",
+  "version": "0.14.2",
   "private": true,
   "type": "module",
   "main": "./dist/index.mjs",
diff --git a/apps/web/src/components/UpdaterPopup.tsx b/apps/web/src/components/UpdaterPopup.tsx
index 0c42aafff0d..036e3ece856 100644
--- a/apps/web/src/components/UpdaterPopup.tsx
+++ b/apps/web/src/components/UpdaterPopup.tsx
@@ -8,12 +8,15 @@ import {
   deriveUpdaterModel,
   openUpdaterInstaller,
   quitAfterUpdaterInstallerOpen,
+  releaseNoteCandidatesFromStatus,
   readUpdaterStatus,
   subscribeToUpdaterStatus,
+  type UpdaterReleaseNoteCandidate,
   type UpdaterModel,
 } from '../lib/updater';
-import { useT } from '../i18n';
+import { useI18n } from '../i18n';
 import type { Dict } from '../i18n/types';
+import { renderMarkdown } from '../runtime/markdown';
 import { useAnalytics, useAppVersion } from '../analytics/provider';
 import {
   trackUpdateIndicatorClick,
@@ -25,6 +28,9 @@ import {
 const INSTALL_HANDOFF_WATCHDOG_MS = 10_000;
 
 type InstallState = 'idle' | 'opening' | 'handoff' | 'recoverable';
+type ReleaseNotesState =
+  | { state: 'idle' | 'loading' | 'empty' }
+  | { candidate: UpdaterReleaseNoteCandidate; state: 'ready'; text: string };
 type Translator = (key: keyof Dict, vars?: Record<string, string | number>) => string;
 
 function versionText(t: Translator, model: UpdaterModel): string {
@@ -69,13 +75,14 @@ function updaterErrorCode(model: UpdaterModel): string | undefined {
 }
 
 export function UpdaterPopup() {
-  const t = useT();
+  const { locale, t } = useI18n();
   const wrapRef = useRef<HTMLDivElement | null>(null);
   const actionInFlightRef = useRef(false);
   const handoffWatchdogRef = useRef<number | null>(null);
   const [model, setModel] = useState<UpdaterModel>(() => deriveUpdaterModel(null));
   const [panelOpen, setPanelOpen] = useState(false);
   const [installState, setInstallState] = useState<InstallState>('idle');
+  const [releaseNotesState, setReleaseNotesState] = useState<ReleaseNotesState>({ state: 'idle' });
 
   const clearHandoffWatchdog = useCallback(() => {
     if (handoffWatchdogRef.current == null) return;
@@ -126,6 +133,14 @@ export function UpdaterPopup() {
   const showControl = ready || installState !== 'idle';
   const controlLabel = model.updateKind === 'payload' ? t('updater.installRestart') : t('updater.openInstaller');
   const channelLabel = channelLabelFor(model.status?.channel);
+  const releaseNoteCandidates = useMemo(
+    () => releaseNoteCandidatesFromStatus(model.status, locale),
+    [locale, model.status],
+  );
+  const releaseNoteCandidatesKey = useMemo(
+    () => releaseNoteCandidates.map((candidate) => `${candidate.format}:${candidate.url}`).join('|'),
+    [releaseNoteCandidates],
+  );
   const analytics = useAnalytics();
   const appVersionBefore = useAppVersion();
   const versionProps = useMemo(
@@ -165,6 +180,39 @@ export function UpdaterPopup() {
     });
   }, [analytics.track, promptSurfaceKey, versionProps]);
 
+  useEffect(() => {
+    if (!panelOpen || releaseNoteCandidates.length === 0) {
+      setReleaseNotesState({ state: 'idle' });
+      return;
+    }
+
+    let cancelled = false;
+    setReleaseNotesState({ state: 'loading' });
+
+    const load = async () => {
+      for (const candidate of releaseNoteCandidates) {
+        try {
+          const response = await fetch(candidate.url, {
+            headers: { 'Cache-Control': 'no-cache' },
+          });
+          if (!response.ok) continue;
+          const text = await response.text();
+          if (cancelled) return;
+          setReleaseNotesState({ candidate, state: 'ready', text });
+          return;
+        } catch {
+          // Try the next metadata-provided fallback URL.
+        }
+      }
+      if (!cancelled) setReleaseNotesState({ state: 'empty' });
+    };
+
+    void load();
+    return () => {
+      cancelled = true;
+    };
+  }, [panelOpen, releaseNoteCandidates, releaseNoteCandidatesKey]);
+
   const close = useCallback(() => {
     if (installBusy) return;
     trackUpdateIndicatorClick(analytics.track, {
@@ -316,6 +364,24 @@ export function UpdaterPopup() {
               <h2 id="updater-popup-title">{t('updater.ready')}</h2>
               <p>{versionText(t, model)}</p>
               {channelLabel != null ? <span className="updater-popup__badge">{channelLabel}</span> : null}
+              {releaseNotesState.state === 'ready' ? (
+                <div
+                  className={`updater-popup__release-notes updater-popup__release-notes--${releaseNotesState.candidate.format}`}
+                  data-testid="updater-release-notes"
+                >
+                  {releaseNotesState.candidate.format === 'html' ? (
+                    <iframe
+                      sandbox=""
+                      srcDoc={releaseNotesState.text}
+                      title={t('updater.ready')}
+                    />
+                  ) : (
+                    <div className="prose-block">
+                      {renderMarkdown(releaseNotesState.text)}
+                    </div>
+                  )}
+                </div>
+              ) : null}
             </div>
             <div className="updater-popup__actions">
               <button className="updater-popup__button" disabled={installBusy} type="button" onClick={close}>
diff --git a/apps/web/src/lib/updater.ts b/apps/web/src/lib/updater.ts
index d6c814bd1ab..a89b416c6c9 100644
--- a/apps/web/src/lib/updater.ts
+++ b/apps/web/src/lib/updater.ts
@@ -23,6 +23,15 @@ export type UpdaterDownloadProgress = {
   totalBytes: number | null;
 };
 
+export type UpdaterReleaseNoteFormat = 'html' | 'markdown';
+
+export type UpdaterReleaseNoteCandidate = {
+  contentType: string | null;
+  format: UpdaterReleaseNoteFormat;
+  locale: string;
+  url: string;
+};
+
 export type UpdaterActionResult =
   | { ok: true; model: UpdaterModel; status: OpenDesignHostUpdaterStatusSnapshot }
   | OpenDesignHostFailure;
@@ -86,6 +95,72 @@ function downloadProgressFromStatus(
   };
 }
 
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value != null && !Array.isArray(value);
+}
+
+function metadataFromStatus(status: OpenDesignHostUpdaterStatusSnapshot | null): Record<string, unknown> | null {
+  if (isRecord(status?.metadata)) return status.metadata;
+  if (isRecord(status?.active?.metadata)) return status.active.metadata;
+  if (isRecord(status?.incoming?.metadata)) return status.incoming.metadata;
+  return null;
+}
+
+function readReleaseNoteCandidate(
+  files: Record<string, unknown>,
+  locale: string,
+  format: UpdaterReleaseNoteFormat,
+): UpdaterReleaseNoteCandidate | null {
+  const localeEntry = files[locale];
+  if (!isRecord(localeEntry)) return null;
+  const entry = localeEntry[format];
+  if (!isRecord(entry)) return null;
+  const url = entry.url;
+  if (typeof url !== 'string' || url.length === 0) return null;
+  const contentType = typeof entry.contentType === 'string' && entry.contentType.length > 0
+    ? entry.contentType
+    : null;
+  return {
+    contentType,
+    format,
+    locale,
+    url,
+  };
+}
+
+export function releaseNoteCandidatesFromStatus(
+  status: OpenDesignHostUpdaterStatusSnapshot | null,
+  locale: string,
+): UpdaterReleaseNoteCandidate[] {
+  const metadata = metadataFromStatus(status);
+  const releaseNotes = isRecord(metadata?.releaseNotes) ? metadata.releaseNotes : null;
+  const files = isRecord(releaseNotes?.files) ? releaseNotes.files : null;
+  if (files == null) return [];
+
+  const defaultLocale =
+    typeof releaseNotes?.defaultLocale === 'string' && releaseNotes.defaultLocale.length > 0
+      ? releaseNotes.defaultLocale
+      : 'en';
+  const currentLocale = locale.length > 0 ? locale : defaultLocale;
+  const ordered: Array<[string, UpdaterReleaseNoteFormat]> = [
+    [currentLocale, 'html'],
+    [defaultLocale, 'html'],
+    [currentLocale, 'markdown'],
+    [defaultLocale, 'markdown'],
+  ];
+  const seen = new Set<string>();
+  const candidates: UpdaterReleaseNoteCandidate[] = [];
+  for (const [candidateLocale, format] of ordered) {
+    const candidate = readReleaseNoteCandidate(files, candidateLocale, format);
+    if (candidate == null) continue;
+    const key = `${candidate.format}:${candidate.url}`;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    candidates.push(candidate);
+  }
+  return candidates;
+}
+
 export function deriveUpdaterModel(
   status: OpenDesignHostUpdaterStatusSnapshot | null,
   options: { hostAvailable?: boolean } = {},
diff --git a/apps/web/src/styles/workspace/mention-home.css b/apps/web/src/styles/workspace/mention-home.css
index b7f648859f2..02eb0bd42a3 100644
--- a/apps/web/src/styles/workspace/mention-home.css
+++ b/apps/web/src/styles/workspace/mention-home.css
@@ -381,6 +381,30 @@
   line-height: 1.45;
 }
 
+.updater-popup__release-notes {
+  max-height: 180px;
+  margin-top: 10px;
+  overflow: auto;
+  border: 1px solid var(--border-soft);
+  border-radius: 8px;
+  background: var(--bg-panel);
+}
+
+.updater-popup__release-notes iframe {
+  display: block;
+  width: 100%;
+  min-height: 160px;
+  border: 0;
+  background: #ffffff;
+}
+
+.updater-popup__release-notes .prose-block {
+  padding: 10px;
+  color: var(--text);
+  font-size: 12px;
+  line-height: 1.45;
+}
+
 .updater-popup__error {
   color: var(--red) !important;
 }
diff --git a/apps/web/tests/components/UpdaterPopup.test.tsx b/apps/web/tests/components/UpdaterPopup.test.tsx
index 6712be6f619..d48f6dd2ded 100644
--- a/apps/web/tests/components/UpdaterPopup.test.tsx
+++ b/apps/web/tests/components/UpdaterPopup.test.tsx
@@ -60,11 +60,13 @@ function payloadDownloadedStatus(overrides: Partial<OpenDesignHostUpdaterStatusS
 
 describe('UpdaterPopup', () => {
   let restoreHost: (() => void) | null = null;
+  const originalFetch = globalThis.fetch;
 
   afterEach(() => {
     cleanup();
     restoreHost?.();
     restoreHost = null;
+    globalThis.fetch = originalFetch;
   });
 
   it('stays hidden for non-installable updater states', async () => {
@@ -176,6 +178,76 @@ describe('UpdaterPopup', () => {
     expect(screen.getByText('Open Design 1.2.3-beta.4 已就绪。Open Design 会关闭并自动重启。')).toBeTruthy();
   });
 
+  it('renders fetched release notes through the metadata fallback chain', async () => {
+    const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
+      const url = String(input);
+      if (url === '/api/version') {
+        return new Response(JSON.stringify({ version: 'test' }), {
+          headers: { 'content-type': 'application/json' },
+          status: 200,
+        });
+      }
+      if (url.endsWith('/en.html')) {
+        return new Response('', { status: 404 });
+      }
+      return new Response('# 中文更新\n\n- 已支持发布说明。', {
+        headers: { 'content-type': 'text/markdown; charset=utf-8' },
+        status: 200,
+      });
+    });
+    globalThis.fetch = fetchMock as typeof fetch;
+    restoreHost = installMockOpenDesignHost({
+      host: {
+        updater: {
+          status: vi.fn(async () => downloadedStatus({
+            metadata: {
+              releaseNotes: {
+                defaultLocale: 'en',
+                files: {
+                  en: {
+                    html: {
+                      contentType: 'text/html; charset=utf-8',
+                      url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/en.html',
+                    },
+                    markdown: {
+                      contentType: 'text/markdown; charset=utf-8',
+                      url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/en.md',
+                    },
+                  },
+                  'zh-CN': {
+                    markdown: {
+                      contentType: 'text/markdown; charset=utf-8',
+                      url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/zh-CN.md',
+                    },
+                  },
+                },
+              },
+            },
+          })),
+        },
+      },
+    });
+
+    render(
+      <I18nProvider initial="zh-CN">
+        <UpdaterPopup />
+      </I18nProvider>,
+    );
+
+    fireEvent.click(await screen.findByTestId('entry-nav-updater'));
+
+    expect(await screen.findByTestId('updater-release-notes')).toBeTruthy();
+    expect(screen.getByText('中文更新')).toBeTruthy();
+    const enHtmlCall = fetchMock.mock.calls.find(([input]) => String(input).endsWith('/en.html'));
+    const zhMarkdownCall = fetchMock.mock.calls.find(([input]) => String(input).endsWith('/zh-CN.md'));
+    expect(enHtmlCall).toEqual(['https://releases.example.test/stable/versions/1.2.3/release-notes/en.html', {
+      headers: { 'Cache-Control': 'no-cache' },
+    }]);
+    expect(zhMarkdownCall).toEqual(['https://releases.example.test/stable/versions/1.2.3/release-notes/zh-CN.md', {
+      headers: { 'Cache-Control': 'no-cache' },
+    }]);
+  });
+
   it('dismisses the confirmation prompt before installation starts', async () => {
     restoreHost = installMockOpenDesignHost({
       host: {
diff --git a/apps/web/tests/lib/updater.test.ts b/apps/web/tests/lib/updater.test.ts
index 2690c5e0b1a..5a047279632 100644
--- a/apps/web/tests/lib/updater.test.ts
+++ b/apps/web/tests/lib/updater.test.ts
@@ -9,6 +9,7 @@ import {
   downloadUpdaterUpdate,
   openUpdaterInstaller,
   quitAfterUpdaterInstallerOpen,
+  releaseNoteCandidatesFromStatus,
   readUpdaterStatus,
 } from '../../src/lib/updater';
 
@@ -133,6 +134,59 @@ describe('web updater model', () => {
     expect(model.hasDownloadedInstaller).toBe(false);
   });
 
+  it('resolves release-note candidates from metadata without guessing R2 paths', () => {
+    const status = downloadedStatus({
+      metadata: {
+        releaseNotes: {
+          defaultLocale: 'en',
+          files: {
+            en: {
+              html: {
+                contentType: 'text/html; charset=utf-8',
+                url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/en.html',
+              },
+              markdown: {
+                contentType: 'text/markdown; charset=utf-8',
+                url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/en.md',
+              },
+            },
+            'zh-CN': {
+              markdown: {
+                contentType: 'text/markdown; charset=utf-8',
+                url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/zh-CN.md',
+              },
+            },
+          },
+        },
+      },
+    });
+
+    expect(releaseNoteCandidatesFromStatus(status, 'zh-CN')).toEqual([
+      {
+        contentType: 'text/html; charset=utf-8',
+        format: 'html',
+        locale: 'en',
+        url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/en.html',
+      },
+      {
+        contentType: 'text/markdown; charset=utf-8',
+        format: 'markdown',
+        locale: 'zh-CN',
+        url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/zh-CN.md',
+      },
+      {
+        contentType: 'text/markdown; charset=utf-8',
+        format: 'markdown',
+        locale: 'en',
+        url: 'https://releases.example.test/stable/versions/1.2.3/release-notes/en.md',
+      },
+    ]);
+    expect(releaseNoteCandidatesFromStatus(status, 'zh-TW').map((candidate) => candidate.locale)).toEqual([
+      'en',
+      'en',
+    ]);
+  });
+
   it('keeps the downloaded installer visible without surfacing newer incoming progress', () => {
     const model = deriveUpdaterModel(
       downloadedStatus({
diff --git a/docs/CHANGELOG/v0.14.2/en.md b/docs/CHANGELOG/v0.14.2/en.md
new file mode 100644
index 00000000000..f410f80964e
--- /dev/null
+++ b/docs/CHANGELOG/v0.14.2/en.md
@@ -0,0 +1,10 @@
+# Open Design 0.14.2
+
+## Improved
+
+- Added stable release-note assets for packaged updater metadata.
+- Added updater fallback loading for localized HTML and Markdown release notes.
+
+## Fixed
+
+- Stable release validation now fails when required release-note Markdown files are missing.
diff --git a/docs/CHANGELOG/v0.14.2/zh-CN.md b/docs/CHANGELOG/v0.14.2/zh-CN.md
new file mode 100644
index 00000000000..83474329dc0
--- /dev/null
+++ b/docs/CHANGELOG/v0.14.2/zh-CN.md
@@ -0,0 +1,10 @@
+# Open Design 0.14.2
+
+## 改进
+
+- 为 packaged updater metadata 增加 stable 发布说明资产。
+- 为 updater 增加本地化 HTML 和 Markdown 发布说明的回退加载。
+
+## 修复
+
+- stable 发布在缺少必需的 Markdown 发布说明文件时会提前失败。
diff --git a/e2e/tests/packaged-smoke-workflow.test.ts b/e2e/tests/packaged-smoke-workflow.test.ts
index 814d0c2a1a4..778e15a7f82 100644
--- a/e2e/tests/packaged-smoke-workflow.test.ts
+++ b/e2e/tests/packaged-smoke-workflow.test.ts
@@ -181,6 +181,15 @@ async function readPackagedVersion(): Promise<string> {
   return packageJson.version;
 }
 
+async function writeReleaseNotesRoot(root: string, releaseVersion: string): Promise<string> {
+  const changelogRoot = join(root, "CHANGELOG");
+  const versionDir = join(changelogRoot, `v${releaseVersion}`);
+  await mkdir(versionDir, { recursive: true });
+  await writeFile(join(versionDir, "en.md"), `# Open Design ${releaseVersion}\n\nEnglish release notes.\n`, "utf8");
+  await writeFile(join(versionDir, "zh-CN.md"), `# Open Design ${releaseVersion}\n\n中文发布说明。\n`, "utf8");
+  return changelogRoot;
+}
+
 async function runScopesPrint(eventName: string, eventPayload: unknown, changedFiles: string[] = []): Promise<Record<string, unknown>> {
   const tempDir = await mkdtemp(join(tmpdir(), "od-scopes-"));
   const eventPath = join(tempDir, "event.json");
@@ -1513,6 +1522,8 @@ process.stdin.on("end", () => {
         const notes = await readFile(outputs.notes_file ?? "", "utf8");
         expect(notes).toContain(`R2 metadata: ${origin.replace(/\/+$/, "")}/stable/latest/metadata.json`);
         expect(notes).toContain(`E2E report: ${origin.replace(/\/+$/, "")}/stable/versions/0.13.0/report.zip`);
+        expect(notes).toContain("docs/CHANGELOG/v0.13.0/en.md");
+        expect(notes).toContain(`${origin.replace(/\/+$/, "")}/stable/versions/0.13.0/release-notes/en.md`);
       } finally {
         await rm(runnerTemp, { force: true, recursive: true });
       }
@@ -1533,6 +1544,7 @@ process.stdin.on("end", () => {
 
     try {
       await mkdir(join(runnerTemp, "bin"), { recursive: true });
+      const releaseNotesRoot = await writeReleaseNotesRoot(runnerTemp, baseVersion);
       await writeFakeGhBin(join(runnerTemp, "bin"), []);
       const fakePath = `${join(runnerTemp, "bin")}${delimiter}${process.env.PATH ?? ""}`;
 
@@ -1546,6 +1558,7 @@ process.stdin.on("end", () => {
           NODE_TLS_REJECT_UNAUTHORIZED: "0",
           OPEN_DESIGN_RELEASE_CHANNEL: "stable",
           OPEN_DESIGN_RELEASE_DRY_RUN: "true",
+          OPEN_DESIGN_RELEASE_NOTES_ROOT: releaseNotesRoot,
           OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: fixture.origin,
           OPEN_DESIGN_GH_NODE_SCRIPT: join(runnerTemp, "bin", "gh"),
           OPEN_DESIGN_STABLE_PRERELEASE_VERSION: prereleaseVersion,
diff --git a/tools/release/src/metadata/prepare-stable.ts b/tools/release/src/metadata/prepare-stable.ts
index 49e93f23e95..a2e412035f1 100644
--- a/tools/release/src/metadata/prepare-stable.ts
+++ b/tools/release/src/metadata/prepare-stable.ts
@@ -15,6 +15,7 @@ import {
   type ReleaseBaseVersionTuple,
   type ReleaseChannel,
 } from "@open-design/release";
+import { assertStableReleaseNotes } from "../release-notes.ts";
 
 const execFile = promisify(execFileCallback);
 
@@ -564,6 +565,10 @@ if (stableBaseVersion.value !== packagedVersion) {
     `${stableBaseVersion.source ?? "release base"} version ${stableBaseVersion.value} must match apps/packaged/package.json version ${packagedVersion}`,
   );
 }
+if (channel === "stable") {
+  const releaseNotes = assertStableReleaseNotes(packagedVersion);
+  log(`release notes: ${releaseNotes.map((file) => file.name).join(", ")}`);
+}
 
 const releases = await fetchReleases(repository);
 const versionTag = `open-design-v${packagedVersion}`;
diff --git a/tools/release/src/release-notes.ts b/tools/release/src/release-notes.ts
new file mode 100644
index 00000000000..572c9c7810a
--- /dev/null
+++ b/tools/release/src/release-notes.ts
@@ -0,0 +1,117 @@
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+
+export type ReleaseNoteFormat = "html" | "markdown";
+
+export type ReleaseNoteSourceFile = {
+  contentType: string;
+  extension: "html" | "md";
+  format: ReleaseNoteFormat;
+  locale: string;
+  name: string;
+  path: string;
+  size: number;
+};
+
+export type ReleaseNotePublishedFile = Omit<ReleaseNoteSourceFile, "path"> & {
+  url: string;
+};
+
+export type ReleaseNotesMetadata = {
+  defaultLocale: "en";
+  files: Record<string, Partial<Record<ReleaseNoteFormat, ReleaseNotePublishedFile>>>;
+  requiredMarkdownLocales: string[];
+  version: string;
+};
+
+export const RELEASE_NOTES_DEFAULT_LOCALE = "en";
+export const RELEASE_NOTES_REQUIRED_MARKDOWN_LOCALES = ["en", "zh-CN"] as const;
+
+function releaseNotesRoot(): string {
+  return process.env.OPEN_DESIGN_RELEASE_NOTES_ROOT ?? join(process.cwd(), "docs", "CHANGELOG");
+}
+
+export function releaseNotesSourceDir(releaseVersion: string): string {
+  return join(releaseNotesRoot(), `v${releaseVersion}`);
+}
+
+function releaseNoteFormat(extension: string): ReleaseNoteFormat | null {
+  if (extension === "html") return "html";
+  if (extension === "md") return "markdown";
+  return null;
+}
+
+function releaseNoteContentType(extension: "html" | "md"): string {
+  return extension === "html" ? "text/html; charset=utf-8" : "text/markdown; charset=utf-8";
+}
+
+function parseReleaseNoteFileName(name: string): { extension: "html" | "md"; format: ReleaseNoteFormat; locale: string } | null {
+  const match = /^([A-Za-z][A-Za-z0-9-]*)\.(html|md)$/.exec(name);
+  if (match?.[1] == null || match[2] == null) return null;
+  const extension = match[2] as "html" | "md";
+  const format = releaseNoteFormat(extension);
+  if (format == null) return null;
+  return {
+    extension,
+    format,
+    locale: match[1],
+  };
+}
+
+export function discoverReleaseNotes(releaseVersion: string): ReleaseNoteSourceFile[] {
+  const sourceDir = releaseNotesSourceDir(releaseVersion);
+  if (!existsSync(sourceDir) || !statSync(sourceDir).isDirectory()) {
+    throw new Error(`stable release notes directory is required: ${sourceDir}`);
+  }
+
+  const files: ReleaseNoteSourceFile[] = [];
+  for (const entry of readdirSync(sourceDir, { withFileTypes: true })) {
+    if (!entry.isFile()) continue;
+    const parsed = parseReleaseNoteFileName(entry.name);
+    if (parsed == null) continue;
+    const path = join(sourceDir, entry.name);
+    files.push({
+      contentType: releaseNoteContentType(parsed.extension),
+      extension: parsed.extension,
+      format: parsed.format,
+      locale: parsed.locale,
+      name: entry.name,
+      path,
+      size: statSync(path).size,
+    });
+  }
+
+  files.sort((left, right) => left.name.localeCompare(right.name));
+  return files;
+}
+
+export function assertStableReleaseNotes(releaseVersion: string): ReleaseNoteSourceFile[] {
+  const files = discoverReleaseNotes(releaseVersion);
+  const names = new Set(files.map((file) => file.name));
+  const missing = RELEASE_NOTES_REQUIRED_MARKDOWN_LOCALES
+    .map((locale) => `${locale}.md`)
+    .filter((name) => !names.has(name));
+  if (missing.length > 0) {
+    throw new Error(
+      `stable release notes require ${missing.join(", ")} under ${releaseNotesSourceDir(releaseVersion)}`,
+    );
+  }
+  return files;
+}
+
+export function releaseNotesMetadata(
+  releaseVersion: string,
+  files: ReleaseNotePublishedFile[],
+): ReleaseNotesMetadata {
+  const byLocale: ReleaseNotesMetadata["files"] = {};
+  for (const file of files) {
+    byLocale[file.locale] ??= {};
+    byLocale[file.locale][file.format] = file;
+  }
+  return {
+    defaultLocale: RELEASE_NOTES_DEFAULT_LOCALE,
+    files: byLocale,
+    requiredMarkdownLocales: [...RELEASE_NOTES_REQUIRED_MARKDOWN_LOCALES],
+    version: releaseVersion,
+  };
+}
diff --git a/tools/release/src/storage/common.ts b/tools/release/src/storage/common.ts
index cdb44bc62b5..b0904c2e900 100644
--- a/tools/release/src/storage/common.ts
+++ b/tools/release/src/storage/common.ts
@@ -59,6 +59,7 @@ export function contentType(name: string): string {
   if (name.endsWith(".yml") || name.endsWith(".yaml")) return "application/x-yaml; charset=utf-8";
   if (name.endsWith(".json")) return "application/json; charset=utf-8";
   if (name.endsWith(".html")) return "text/html; charset=utf-8";
+  if (name.endsWith(".md")) return "text/markdown; charset=utf-8";
   if (name.endsWith(".log") || name.endsWith(".txt")) return "text/plain; charset=utf-8";
   if (name.endsWith(".png")) return "image/png";
   if (name.endsWith(".xml")) return "application/xml; charset=utf-8";
diff --git a/tools/release/src/storage/publish-metadata.ts b/tools/release/src/storage/publish-metadata.ts
index fddd42cddfe..ec8982b6f22 100644
--- a/tools/release/src/storage/publish-metadata.ts
+++ b/tools/release/src/storage/publish-metadata.ts
@@ -18,6 +18,11 @@ import {
   releaseMetadataVersionFields,
   type CountedReleaseChannel,
 } from "@open-design/release";
+import {
+  assertStableReleaseNotes,
+  releaseNotesMetadata,
+  type ReleaseNotePublishedFile,
+} from "../release-notes.ts";
 
 type PlatformManifest = {
   artifacts?: Record<string, { url?: string }>;
@@ -218,6 +223,26 @@ async function publishLatestPlatformObjects(manifests: Record<string, PlatformMa
   }
 }
 
+async function publishStableReleaseNotes(versionPrefix: string): Promise<ReturnType<typeof releaseNotesMetadata> | null> {
+  if (releaseChannel !== "stable") return null;
+  const files = assertStableReleaseNotes(releaseVersion);
+  const published: ReleaseNotePublishedFile[] = [];
+  for (const file of files) {
+    const objectKey = `${versionPrefix}/release-notes/${file.name}`;
+    await upload(file.path, objectKey, "public, max-age=31536000, immutable", file.contentType);
+    published.push({
+      contentType: file.contentType,
+      extension: file.extension,
+      format: file.format,
+      locale: file.locale,
+      name: file.name,
+      size: file.size,
+      url: publicUrl(publicOrigin, `${versionPrefix}/release-notes`, file.name),
+    });
+  }
+  return releaseNotesMetadata(releaseVersion, published);
+}
+
 function enabled(name: string): boolean {
   return process.env[name] === "true";
 }
@@ -292,6 +317,7 @@ if (assetVersionSuffix === "auto") {
   assetVersionSuffix = allReadyTargetsSigned ? ".signed" : ".unsigned";
 }
 const versionPrefix = optional("RELEASE_VERSION_PREFIX", `${releaseChannel}/versions/${releaseVersion}${assetVersionSuffix}`);
+const releaseNotes = await publishStableReleaseNotes(versionPrefix);
 
 const latestMetadataUpdated = releaseState === "complete";
 const metadata = {
@@ -322,6 +348,7 @@ const metadata = {
   },
   readyPlatforms: readyTargets,
   readyTargets,
+  ...(releaseNotes == null ? {} : { releaseNotes }),
   releaseState,
   releaseTargets,
   signed: process.env.RELEASE_SIGNED === "true",
diff --git a/tools/release/src/storage/verify-metadata.ts b/tools/release/src/storage/verify-metadata.ts
index 7321d57baf1..4cf825d4f77 100644
--- a/tools/release/src/storage/verify-metadata.ts
+++ b/tools/release/src/storage/verify-metadata.ts
@@ -21,6 +21,9 @@ const metadata = (metadataPath.length > 0
       return response.json();
     })()) as {
   channel?: string;
+  releaseNotes?: {
+    files?: Record<string, { markdown?: { url?: string } }>;
+  };
   releaseState?: string;
   releaseTargets?: Record<string, { artifacts?: Record<string, { url?: string }>; status?: string }>;
   [key: string]: unknown;
@@ -49,4 +52,16 @@ for (const target of ["mac_arm64", "win_x64", "mac_x64", "linux_x64"]) {
   }
 }
 
+if (releaseChannel === "stable") {
+  for (const locale of ["en", "zh-CN"]) {
+    const url = metadata.releaseNotes?.files?.[locale]?.markdown?.url;
+    if (url == null) {
+      throw new Error(`stable metadata releaseNotes.files.${locale}.markdown.url is required`);
+    }
+    if (!url.includes(`/stable/versions/${releaseVersion}/release-notes/${locale}.md`)) {
+      throw new Error(`stable metadata release note URL for ${locale} points outside the versioned release-notes prefix: ${url}`);
+    }
+  }
+}
+
 console.log(`verified ${releaseChannel} metadata ${metadataUrl} (${metadata.releaseState ?? "unknown"})`);
diff --git a/tools/release/tests/channel-prepare.test.ts b/tools/release/tests/channel-prepare.test.ts
index 6e04ec280ae..a278f0134b4 100644
--- a/tools/release/tests/channel-prepare.test.ts
+++ b/tools/release/tests/channel-prepare.test.ts
@@ -1,5 +1,5 @@
 import { execFile as execFileCallback } from "node:child_process";
-import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { createRequire } from "node:module";
 import { createServer as createHttpsServer } from "node:https";
 import { tmpdir } from "node:os";
@@ -140,6 +140,15 @@ async function writeFakeGhScript(root: string): Promise<string> {
   return scriptPath;
 }
 
+async function writeReleaseNotesRoot(root: string, releaseVersion: string): Promise<string> {
+  const changelogRoot = join(root, "CHANGELOG");
+  const versionDir = join(changelogRoot, `v${releaseVersion}`);
+  await mkdir(versionDir, { recursive: true });
+  await writeFile(join(versionDir, "en.md"), `# Open Design ${releaseVersion}\n\nEnglish release notes.\n`, "utf8");
+  await writeFile(join(versionDir, "zh-CN.md"), `# Open Design ${releaseVersion}\n\n中文发布说明。\n`, "utf8");
+  return changelogRoot;
+}
+
 async function readPackagedVersion(): Promise<string> {
   const packageJson = JSON.parse(await readFile(packagedPackageJsonPath, "utf8")) as { version?: unknown };
   if (typeof packageJson.version !== "string" || packageJson.version.length === 0) {
@@ -354,10 +363,12 @@ describe("tools-release local channel prepare validation", () => {
 
     try {
       const fakeGh = await writeFakeGhScript(ghRoot);
+      const releaseNotesRoot = await writeReleaseNotesRoot(ghRoot, packagedVersion);
       const stable = await runPrepare("stable", {
         GITHUB_REF_NAME: `release/v${packagedVersion}`,
         GITHUB_REPOSITORY: "nexu-io/open-design",
         GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+        OPEN_DESIGN_RELEASE_NOTES_ROOT: releaseNotesRoot,
         OPEN_DESIGN_GH_NODE_SCRIPT: fakeGh,
         OPEN_DESIGN_RELEASE_DRY_RUN: "true",
         OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: server.origin,
@@ -389,10 +400,12 @@ describe("tools-release local channel prepare validation", () => {
 
     try {
       const fakeGh = await writeFakeGhScript(ghRoot);
+      const releaseNotesRoot = await writeReleaseNotesRoot(ghRoot, packagedVersion);
       const stable = await runPrepare("stable", {
         GITHUB_REF_NAME: `release/v${packagedVersion}`,
         GITHUB_REPOSITORY: "nexu-io/open-design",
         GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+        OPEN_DESIGN_RELEASE_NOTES_ROOT: releaseNotesRoot,
         OPEN_DESIGN_GH_NODE_SCRIPT: fakeGh,
         OPEN_DESIGN_RELEASE_DRY_RUN: "prepublish",
         OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: server.origin,
@@ -421,10 +434,12 @@ describe("tools-release local channel prepare validation", () => {
 
     try {
       const fakeGh = await writeFakeGhScript(ghRoot);
+      const releaseNotesRoot = await writeReleaseNotesRoot(ghRoot, packagedVersion);
       const stable = await runPrepare("stable", {
         GITHUB_REF_NAME: `release/v${packagedVersion}`,
         GITHUB_REPOSITORY: "nexu-io/open-design",
         GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+        OPEN_DESIGN_RELEASE_NOTES_ROOT: releaseNotesRoot,
         OPEN_DESIGN_GH_NODE_SCRIPT: fakeGh,
         OPEN_DESIGN_RELEASE_DRY_RUN: "false",
         OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: server.origin,
@@ -451,10 +466,12 @@ describe("tools-release local channel prepare validation", () => {
 
     try {
       const fakeGh = await writeFakeGhScript(ghRoot);
+      const releaseNotesRoot = await writeReleaseNotesRoot(ghRoot, packagedVersion);
       await expect(runPrepare("stable", {
         GITHUB_REF_NAME: `release/v${packagedVersion}`,
         GITHUB_REPOSITORY: "nexu-io/open-design",
         GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+        OPEN_DESIGN_RELEASE_NOTES_ROOT: releaseNotesRoot,
         OPEN_DESIGN_GH_NODE_SCRIPT: fakeGh,
         OPEN_DESIGN_RELEASE_DRY_RUN: "metadata",
         OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: server.origin,
@@ -466,6 +483,29 @@ describe("tools-release local channel prepare validation", () => {
     }
   });
 
+  it("requires stable release-note markdown assets before promotion", async () => {
+    const packagedVersion = await readPackagedVersion();
+    const missingRoot = await mkdtemp(join(tmpdir(), "od-tools-release-missing-notes-"));
+    const ghRoot = await mkdtemp(join(tmpdir(), "od-tools-release-gh-"));
+
+    try {
+      const fakeGh = await writeFakeGhScript(ghRoot);
+      await expect(runPrepare("stable", {
+        GITHUB_REF_NAME: `release/v${packagedVersion}`,
+        GITHUB_REPOSITORY: "nexu-io/open-design",
+        GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+        OPEN_DESIGN_RELEASE_NOTES_ROOT: missingRoot,
+        OPEN_DESIGN_GH_NODE_SCRIPT: fakeGh,
+        OPEN_DESIGN_RELEASE_DRY_RUN: "metadata",
+        OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: "https://releases.example.test",
+        OPEN_DESIGN_STABLE_PRERELEASE_VERSION: `${packagedVersion}-prerelease.2`,
+      })).rejects.toThrow(/stable release notes directory is required/);
+    } finally {
+      await rm(ghRoot, { force: true, recursive: true });
+      await rm(missingRoot, { force: true, recursive: true });
+    }
+  });
+
   it("requires stable promotion to run from the release version branch", async () => {
     const packagedVersion = await readPackagedVersion();
     const prereleaseVersion = `${packagedVersion}-prerelease.2`;
diff --git a/tools/serve/src/index.ts b/tools/serve/src/index.ts
index 91d0ae590b7..c85950ef5c3 100644
--- a/tools/serve/src/index.ts
+++ b/tools/serve/src/index.ts
@@ -13,6 +13,7 @@ type CliOptions = {
   port?: string;
   includePayload?: boolean;
   payloadPath?: string;
+  releaseNotes?: string;
   version?: string;
 };
 
@@ -35,6 +36,12 @@ function parsePlatform(value: string | undefined): "mac" | "win" {
   throw new Error("--platform must be mac or win");
 }
 
+function parseReleaseNotes(value: string | undefined): "none" | "markdown" | "html" | "mixed" {
+  if (value == null || value.length === 0 || value === "none") return "none";
+  if (value === "markdown" || value === "html" || value === "mixed") return value;
+  throw new Error("--release-notes must be none, markdown, html, or mixed");
+}
+
 async function start(service: string, options: CliOptions): Promise<void> {
   if (service === "release-storage") {
     const server = await startReleaseStorageFixtureServer({
@@ -64,6 +71,7 @@ async function start(service: string, options: CliOptions): Promise<void> {
     includePayload: options.includePayload,
     payloadPath: options.payloadPath,
     port: parsePort(options.port),
+    releaseNotes: parseReleaseNotes(options.releaseNotes),
     version: options.version,
   });
   if (options.json === true) {
@@ -100,6 +108,7 @@ cli
   .option("--payload-path <path>", "Serve launcher payload bytes from a real archive")
   .option("--platform <platform>", "Updater platform: mac|win", { default: "mac" })
   .option("--port <port>", "Port to bind, 0 for dynamic", { default: "0" })
+  .option("--release-notes <mode>", "Release notes fixture: none|markdown|html|mixed", { default: "none" })
   .option("--version <version>", "Fixture update version", { default: "99.0.0" })
   .action((service: string, options: CliOptions) => {
     void start(service, options);
diff --git a/tools/serve/src/updater-fixture.ts b/tools/serve/src/updater-fixture.ts
index 589b5f67156..33c12e801da 100644
--- a/tools/serve/src/updater-fixture.ts
+++ b/tools/serve/src/updater-fixture.ts
@@ -25,6 +25,7 @@ export type UpdaterFixtureOptions = {
   payloadBody?: Buffer | string;
   payloadPath?: string;
   port?: number;
+  releaseNotes?: "none" | "markdown" | "html" | "mixed";
   version?: string;
 };
 
@@ -40,6 +41,7 @@ export type UpdaterFixtureInfo = {
   payloadSha256: string | null;
   payloadUrl: string | null;
   platform: "mac" | "win";
+  releaseNotes: Record<string, { html?: string; markdown?: string }>;
   sha256: string;
   version: string;
 };
@@ -84,6 +86,12 @@ function serverOrigin(server: Server): string {
   return `http://127.0.0.1:${address.port}`;
 }
 
+function applyCors(response: ServerResponse): void {
+  response.setHeader("access-control-allow-headers", "cache-control,content-type,range");
+  response.setHeader("access-control-allow-methods", "GET,HEAD,OPTIONS");
+  response.setHeader("access-control-allow-origin", "*");
+}
+
 type ParsedRange = { end: number; start: number } | "invalid" | "unsatisfiable" | null;
 
 function parseNonNegativeInteger(value: string): number | null {
@@ -206,6 +214,43 @@ function channelMetadata(channel: UpdaterFixtureChannel, version: string): Recor
   return releaseMetadataVersionFields(channel, version);
 }
 
+type FixtureReleaseNote = {
+  body: string;
+  contentType: string;
+  extension: "html" | "md";
+  format: "html" | "markdown";
+  locale: string;
+  name: string;
+};
+
+function fixtureReleaseNotes(mode: UpdaterFixtureOptions["releaseNotes"], version: string): FixtureReleaseNote[] {
+  const selected = mode ?? "none";
+  if (selected === "none") return [];
+  const markdown = (locale: string, title: string): FixtureReleaseNote => ({
+    body: `# ${title}\n\nRelease note fixture for ${version} (${locale}).\n`,
+    contentType: "text/markdown; charset=utf-8",
+    extension: "md",
+    format: "markdown",
+    locale,
+    name: `${locale}.md`,
+  });
+  const html = (locale: string, title: string): FixtureReleaseNote => ({
+    body: `<!doctype html><meta charset="utf-8"><h1>${title}</h1><p>Release note fixture for ${version} (${locale}).</p>`,
+    contentType: "text/html; charset=utf-8",
+    extension: "html",
+    format: "html",
+    locale,
+    name: `${locale}.html`,
+  });
+  const notes = [markdown("en", `Open Design ${version}`), markdown("zh-CN", `Open Design ${version}`)];
+  if (selected === "html") {
+    notes.push(html("en", `Open Design ${version}`), html("zh-CN", `Open Design ${version}`));
+  } else if (selected === "mixed") {
+    notes.push(html("en", `Open Design ${version}`));
+  }
+  return notes;
+}
+
 export async function startUpdaterFixtureServer(options: UpdaterFixtureOptions = {}): Promise<UpdaterFixtureServer> {
   const channel = normalizeChannel(options.channel);
   const host = options.host ?? "127.0.0.1";
@@ -252,9 +297,16 @@ export async function startUpdaterFixtureServer(options: UpdaterFixtureOptions =
   const payloadSha256 = options.payloadPath == null
     ? createHash("sha256").update(payloadBody).digest("hex")
     : await sha256File(options.payloadPath);
+  const releaseNoteFiles = fixtureReleaseNotes(options.releaseNotes, version);
 
   let info: UpdaterFixtureInfo | null = null;
   const server = createServer((request, response) => {
+    applyCors(response);
+    if (request.method === "OPTIONS") {
+      response.statusCode = 204;
+      response.end();
+      return;
+    }
     if (info == null) {
       response.statusCode = 503;
       response.end("fixture not ready");
@@ -303,10 +355,46 @@ export async function startUpdaterFixtureServer(options: UpdaterFixtureOptions =
             signed: false,
           },
         },
+        ...(releaseNoteFiles.length > 0
+          ? {
+              releaseNotes: {
+                defaultLocale: "en",
+                files: Object.fromEntries(
+                  ["en", "zh-CN"].map((locale) => [
+                    locale,
+                    Object.fromEntries(
+                      releaseNoteFiles
+                        .filter((note) => note.locale === locale)
+                        .map((note) => [
+                          note.format,
+                          {
+                            contentType: note.contentType,
+                            extension: note.extension,
+                            format: note.format,
+                            locale: note.locale,
+                            name: note.name,
+                            size: Buffer.byteLength(note.body, "utf8"),
+                            url: `${origin}/${channel}/versions/${version}/release-notes/${encodeURIComponent(note.name)}`,
+                          },
+                        ]),
+                    ),
+                  ]),
+                ),
+                requiredMarkdownLocales: ["en", "zh-CN"],
+                version,
+              },
+            }
+          : {}),
         version: 1,
       }));
       return;
     }
+    const releaseNote = releaseNoteFiles.find((note) => path === `/${channel}/versions/${version}/release-notes/${encodeURIComponent(note.name)}`);
+    if (releaseNote != null) {
+      response.setHeader("content-type", releaseNote.contentType);
+      endWithOptionalBody(request, response, releaseNote.body);
+      return;
+    }
     if (path === `/${channel}/versions/${version}/${artifactPathSegment}`) {
       if (options.artifactPath != null && artifactFileStat != null) {
         sendFileArtifact(request, response, options.artifactPath, artifactFileStat.size, contentType);
@@ -353,6 +441,19 @@ export async function startUpdaterFixtureServer(options: UpdaterFixtureOptions =
     payloadSha256: includePayload ? payloadSha256 : null,
     payloadUrl,
     platform,
+    releaseNotes: Object.fromEntries(
+      ["en", "zh-CN"].map((locale) => [
+        locale,
+        Object.fromEntries(
+          releaseNoteFiles
+            .filter((note) => note.locale === locale)
+            .map((note) => [
+              note.format,
+              `${origin}/${channel}/versions/${version}/release-notes/${encodeURIComponent(note.name)}`,
+            ]),
+        ),
+      ]),
+    ),
     sha256,
     version,
   };
diff --git a/tools/serve/tests/release-metadata-publish.test.ts b/tools/serve/tests/release-metadata-publish.test.ts
index 77882fb66b0..b0c0c58d878 100644
--- a/tools/serve/tests/release-metadata-publish.test.ts
+++ b/tools/serve/tests/release-metadata-publish.test.ts
@@ -41,9 +41,15 @@ describe("shared release metadata publisher", () => {
         ["preview", "1.2.3-preview.4"],
         ["stable", "1.2.3"],
       ] as const) {
+        const changelogRoot = join(root, channel, "CHANGELOG");
         const manifestDir = join(root, channel, "manifests");
         const metadataDir = join(root, channel, "metadata");
+        const releaseNotesDir = join(changelogRoot, `v${version}`);
         await mkdir(manifestDir, { recursive: true });
+        await mkdir(releaseNotesDir, { recursive: true });
+        await writeFile(join(releaseNotesDir, "en.md"), `# Open Design ${version}\n\nEnglish notes.\n`, "utf8");
+        await writeFile(join(releaseNotesDir, "zh-CN.md"), `# Open Design ${version}\n\n中文说明。\n`, "utf8");
+        await writeFile(join(releaseNotesDir, "en.html"), `<h1>Open Design ${version}</h1>\n`, "utf8");
         const base = {
           channel,
           enabled: true,
@@ -98,6 +104,7 @@ describe("shared release metadata publisher", () => {
           ENABLE_MAC_X64: "false",
           ENABLE_WIN_X64: "true",
           MAC_ARM64_RESULT: "success",
+          OPEN_DESIGN_RELEASE_NOTES_ROOT: changelogRoot,
           RELEASE_ASSET_SUFFIX: "",
           RELEASE_CHANNEL: channel,
           RELEASE_COMMIT: "abc123",
@@ -129,6 +136,12 @@ describe("shared release metadata publisher", () => {
             mac_arm64?: { artifacts?: { payload?: { url?: string } } };
             win_x64?: { artifacts?: { payload?: { url?: string } } };
           };
+          releaseNotes?: {
+            files?: Record<string, {
+              html?: { contentType?: string; url?: string };
+              markdown?: { contentType?: string; url?: string };
+            }>;
+          };
           allReadyTargetsSigned?: boolean;
           signed?: boolean;
           stableVersion?: string;
@@ -145,6 +158,12 @@ describe("shared release metadata publisher", () => {
         expect(metadata.github?.commit).toBe("abc123");
         if (channel === "stable") {
           expect(metadata.stableVersion).toBe("1.2.3");
+          expect(metadata.releaseNotes?.files?.en?.html?.url).toBe("https://releases.example.test/stable/versions/1.2.3/release-notes/en.html");
+          expect(metadata.releaseNotes?.files?.en?.markdown?.contentType).toBe("text/markdown; charset=utf-8");
+          expect(metadata.releaseNotes?.files?.["zh-CN"]?.markdown?.url).toBe("https://releases.example.test/stable/versions/1.2.3/release-notes/zh-CN.md");
+          expect(server.getObject("stable/versions/1.2.3/release-notes/en.md")).not.toBeNull();
+          expect(server.getObject("stable/versions/1.2.3/release-notes/zh-CN.md")).not.toBeNull();
+          expect(server.getObject("stable/versions/1.2.3/release-notes/en.html")).not.toBeNull();
         }
         expect(server.getObject(`${channel}/latest/metadata.json`)).not.toBeNull();
       }
diff --git a/tools/serve/tests/updater-fixture.test.ts b/tools/serve/tests/updater-fixture.test.ts
index f8f1f7f1577..737cc7ad59d 100644
--- a/tools/serve/tests/updater-fixture.test.ts
+++ b/tools/serve/tests/updater-fixture.test.ts
@@ -71,6 +71,47 @@ describe("updater fixture server", () => {
     }
   });
 
+  it("serves CORS-enabled release-note fixtures through updater metadata", async () => {
+    const server = await startUpdaterFixtureServer({
+      channel: "stable",
+      releaseNotes: "mixed",
+      version: "2.0.0",
+    });
+    try {
+      const metadataResponse = await fetch(server.info.metadataUrl, {
+        headers: { origin: "http://127.0.0.1:33000" },
+      });
+      expect(metadataResponse.headers.get("access-control-allow-origin")).toBe("*");
+      expect(metadataResponse.ok).toBe(true);
+      const metadata = await metadataResponse.json() as {
+        releaseNotes?: {
+          files?: Record<string, {
+            html?: { url?: string };
+            markdown?: { url?: string };
+          }>;
+        };
+      };
+      expect(metadata.releaseNotes?.files?.en?.html?.url).toBe(server.info.releaseNotes.en?.html);
+      expect(metadata.releaseNotes?.files?.["zh-CN"]?.markdown?.url).toBe(server.info.releaseNotes["zh-CN"]?.markdown);
+
+      const options = await fetch(server.info.releaseNotes.en?.html ?? "", {
+        method: "OPTIONS",
+      });
+      expect(options.status).toBe(204);
+      expect(options.headers.get("access-control-allow-methods")).toContain("GET");
+
+      const html = await fetch(server.info.releaseNotes.en?.html ?? "");
+      expect(html.headers.get("content-type")).toContain("text/html");
+      expect(await html.text()).toContain("Release note fixture for 2.0.0");
+
+      const markdown = await fetch(server.info.releaseNotes["zh-CN"]?.markdown ?? "");
+      expect(markdown.headers.get("content-type")).toContain("text/markdown");
+      expect(await markdown.text()).toContain("Release note fixture for 2.0.0");
+    } finally {
+      await server.close();
+    }
+  });
+
   it("serves a local artifact file as the updater installer", async () => {
     const root = await mkdtemp(join(tmpdir(), "open-design-updater-fixture-"));
     const artifactPath = join(root, "Open Design-release-beta-win-setup.exe");

From c075f76a0987352410c2c5c14870563ff9113281 Mon Sep 17 00:00:00 2001
From: PerishCode <perishcode@gmail.com>
Date: Thu, 9 Jul 2026 12:41:53 +0800
Subject: [PATCH 2/5] Allow stable prepublish dryrun branches

---
 .github/workflows/release-stable.yml         | 14 +++--
 e2e/tests/packaged-smoke-workflow.test.ts    | 49 ++++++++++++++--
 tools/release/src/metadata/prepare-stable.ts | 38 ++++++++++++-
 tools/release/tests/channel-prepare.test.ts  | 59 +++++++++++++++++++-
 4 files changed, 145 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/release-stable.yml b/.github/workflows/release-stable.yml
index 317748def77..2cff1a867ee 100644
--- a/.github/workflows/release-stable.yml
+++ b/.github/workflows/release-stable.yml
@@ -4,9 +4,10 @@ on:
   workflow_dispatch:
     inputs:
       prerelease_version:
-        description: "Exact validated prerelease version to promote, for example 0.5.1-prerelease.3."
-        required: true
+        description: "Exact validated prerelease version to promote, for example 0.5.1-prerelease.3. Optional only for release-dryrun/vX.Y.Z prepublish validation."
+        required: false
         type: string
+        default: ""
       dry_run:
         description: "Release mode. metadata stops after promotion metadata; prepublish runs build/smoke/report/plan without publishing; publish performs the stable release."
         required: false
@@ -17,7 +18,7 @@ on:
           - publish
         default: metadata
       ref:
-        description: "Stable release branch to build, for example release/v0.5.1. Empty builds the dispatch ref, which must also be release/vX.Y.Z."
+        description: "Stable release branch to build, for example release/v0.5.1. Prepublish-only validation may use release-dryrun/v0.5.1. Empty builds the dispatch ref."
         required: false
         type: string
         default: ""
@@ -43,16 +44,17 @@ on:
   workflow_call:
     inputs:
       prerelease_version:
-        description: "Exact validated prerelease version to promote."
-        required: true
+        description: "Exact validated prerelease version to promote. Optional only for release-dryrun/vX.Y.Z prepublish validation."
+        required: false
         type: string
+        default: ""
       dry_run:
         description: "Release mode: metadata, prepublish, or publish. The legacy false value is also accepted for callers."
         required: false
         type: string
         default: "metadata"
       ref:
-        description: "Stable release branch to build. Empty builds the caller's ref, which must also be release/vX.Y.Z."
+        description: "Stable release branch to build. Empty builds the caller's ref. Prepublish-only validation may use release-dryrun/vX.Y.Z."
         required: false
         type: string
         default: ""
diff --git a/e2e/tests/packaged-smoke-workflow.test.ts b/e2e/tests/packaged-smoke-workflow.test.ts
index 778e15a7f82..ec8cb9b07c5 100644
--- a/e2e/tests/packaged-smoke-workflow.test.ts
+++ b/e2e/tests/packaged-smoke-workflow.test.ts
@@ -1251,11 +1251,13 @@ process.stdin.on("end", () => {
 
     expect(workflow).not.toContain("OPEN_DESIGN_STABLE_VERSION:");
     expect(workflow).not.toContain("inputs.release_version");
-    expect(workflow).toContain("Stable release branch to build, for example release/v0.5.1.");
+    expect(workflow).toContain("Prepublish-only validation may use release-dryrun/v0.5.1.");
 
     expect(script).toContain("const stableReleaseBranchPattern = /^release\\/v(\\d+\\.\\d+\\.\\d+)$/;");
+    expect(script).toContain("const stableDryRunBranchPattern = /^release-dryrun\\/v(\\d+\\.\\d+\\.\\d+)$/;");
     expect(script).toContain("function resolveStableBaseVersion");
-    expect(script).toContain("release-stable requires GITHUB_REF_NAME to be release/vX.Y.Z");
+    expect(script).toContain("release-stable requires GITHUB_REF_NAME to be release/vX.Y.Z or release-dryrun/vX.Y.Z");
+    expect(script).toContain("release-dryrun/vX.Y.Z branches are only valid with OPEN_DESIGN_RELEASE_DRY_RUN=prepublish");
     expect(script).toContain("function resolvePrereleaseBaseVersion");
     expect(script).toContain(
       '${stableBaseVersion.source ?? "release base"} version ${stableBaseVersion.value} must match apps/packaged/package.json version',
@@ -1268,7 +1270,7 @@ process.stdin.on("end", () => {
       OPEN_DESIGN_STABLE_VERSION: "",
     });
 
-    expect(output).toContain("release-stable requires GITHUB_REF_NAME to be release/vX.Y.Z; got main");
+    expect(output).toContain("release-stable requires GITHUB_REF_NAME to be release/vX.Y.Z or release-dryrun/vX.Y.Z; got main");
   });
 
   it("[P2] ignores explicit stable version inputs in favor of the release branch gate", async () => {
@@ -1277,7 +1279,7 @@ process.stdin.on("end", () => {
       OPEN_DESIGN_STABLE_VERSION: "0.10.1",
     });
 
-    expect(output).toContain("release-stable requires GITHUB_REF_NAME to be release/vX.Y.Z; got main");
+    expect(output).toContain("release-stable requires GITHUB_REF_NAME to be release/vX.Y.Z or release-dryrun/vX.Y.Z; got main");
   });
 
   it("[P2] reads beta metadata.json written with releaseVersion/releaseNumber field names", async () => {
@@ -1577,6 +1579,45 @@ process.stdin.on("end", () => {
     }
   });
 
+  it("[P2] allows release-dryrun stable prepublish validation without prerelease metadata", async () => {
+    const baseVersion = await readPackagedVersion();
+    const fixture = await startStablePrereleaseMetadataServer({});
+    const runnerTemp = await mkdtemp(join(tmpdir(), "od-release-stable-dryrun-"));
+
+    try {
+      await mkdir(join(runnerTemp, "bin"), { recursive: true });
+      const releaseNotesRoot = await writeReleaseNotesRoot(runnerTemp, baseVersion);
+      await writeFakeGhBin(join(runnerTemp, "bin"), []);
+      const fakePath = `${join(runnerTemp, "bin")}${delimiter}${process.env.PATH ?? ""}`;
+
+      const result = await execFileAsync(process.execPath, ["--experimental-strip-types", releaseStableScriptPath], {
+        cwd: workspaceRoot,
+        env: {
+          ...process.env,
+          GITHUB_REF_NAME: `release-dryrun/v${baseVersion}`,
+          GITHUB_REPOSITORY: "nexu-io/open-design",
+          GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+          NODE_TLS_REJECT_UNAUTHORIZED: "0",
+          OPEN_DESIGN_RELEASE_CHANNEL: "stable",
+          OPEN_DESIGN_RELEASE_DRY_RUN: "prepublish",
+          OPEN_DESIGN_RELEASE_NOTES_ROOT: releaseNotesRoot,
+          OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: fixture.origin,
+          OPEN_DESIGN_GH_NODE_SCRIPT: join(runnerTemp, "bin", "gh"),
+          OPEN_DESIGN_STABLE_PRERELEASE_VERSION: "",
+          Path: fakePath,
+          PATH: fakePath,
+        },
+      });
+
+      expect(result.stdout).toContain("release-dryrun branch: skipping prerelease metadata validation for prepublish dry-run");
+      expect(result.stdout).toContain("[release-stable] state source: release-dryrun branch (prerelease gate skipped)");
+      expect(result.stdout).toContain("[release-stable] dry run mode: prepublish");
+    } finally {
+      await fixture.close();
+      await rm(runnerTemp, { force: true, recursive: true });
+    }
+  });
+
   it("[P2] rejects invalid release dry-run values before remote checks", async () => {
     const output = await runReleaseStableForFailure({
       GITHUB_REF_NAME: "release/v0.10.0",
diff --git a/tools/release/src/metadata/prepare-stable.ts b/tools/release/src/metadata/prepare-stable.ts
index a2e412035f1..95b9b574397 100644
--- a/tools/release/src/metadata/prepare-stable.ts
+++ b/tools/release/src/metadata/prepare-stable.ts
@@ -20,8 +20,11 @@ import { assertStableReleaseNotes } from "../release-notes.ts";
 const execFile = promisify(execFileCallback);
 
 const stableReleaseBranchPattern = /^release\/v(\d+\.\d+\.\d+)$/;
+const stableDryRunBranchPattern = /^release-dryrun\/v(\d+\.\d+\.\d+)$/;
 const stableTagPattern = /^open-design-v(\d+\.\d+\.\d+)$/;
 
+type StableBranchKind = "release" | "release-dryrun";
+
 type GitHubRelease = {
   draft?: boolean;
   name?: string | null;
@@ -30,6 +33,7 @@ type GitHubRelease = {
 };
 
 type ParsedStableVersion = {
+  branchKind?: StableBranchKind;
   parsed: ReleaseBaseVersionTuple;
   source?: string;
   value: string;
@@ -112,12 +116,27 @@ function parseReleaseBranchVersion(branch: string): ParsedStableVersion | null {
   }
 
   return {
+    branchKind: "release",
     parsed: parseReleaseBaseVersion(branchMatch[1]) ?? fail(`invalid release branch version: ${branchMatch[1]}`),
     source: "GITHUB_REF_NAME",
     value: branchMatch[1],
   } satisfies ParsedStableVersion;
 }
 
+function parseStableDryRunBranchVersion(branch: string): ParsedStableVersion | null {
+  const branchMatch = stableDryRunBranchPattern.exec(branch);
+  if (branchMatch?.[1] == null) {
+    return null;
+  }
+
+  return {
+    branchKind: "release-dryrun",
+    parsed: parseReleaseBaseVersion(branchMatch[1]) ?? fail(`invalid release dry-run branch version: ${branchMatch[1]}`),
+    source: "GITHUB_REF_NAME",
+    value: branchMatch[1],
+  } satisfies ParsedStableVersion;
+}
+
 function resolvePrereleaseBaseVersion(branch: string, inputValue: string | undefined): ParsedStableVersion {
   const branchVersion = parseReleaseBranchVersion(branch);
   const inputVersion = parseBaseVersionInput(inputValue, "OPEN_DESIGN_STABLE_VERSION");
@@ -136,10 +155,19 @@ function resolvePrereleaseBaseVersion(branch: string, inputValue: string | undef
   fail("release-prerelease requires either a release/vX.Y.Z branch or OPEN_DESIGN_STABLE_VERSION");
 }
 
-function resolveStableBaseVersion(branch: string): ParsedStableVersion {
+function resolveStableBaseVersion(branch: string, dryRunMode: StableDryRunMode): ParsedStableVersion {
   const branchVersion = parseReleaseBranchVersion(branch);
   if (branchVersion == null) {
-    fail(`release-stable requires GITHUB_REF_NAME to be release/vX.Y.Z; got ${branch.length > 0 ? branch : "(empty)"}`);
+    const dryRunBranchVersion = parseStableDryRunBranchVersion(branch);
+    if (dryRunBranchVersion == null) {
+      fail(
+        `release-stable requires GITHUB_REF_NAME to be release/vX.Y.Z or release-dryrun/vX.Y.Z; got ${branch.length > 0 ? branch : "(empty)"}`,
+      );
+    }
+    if (dryRunMode !== "prepublish") {
+      fail("release-dryrun/vX.Y.Z branches are only valid with OPEN_DESIGN_RELEASE_DRY_RUN=prepublish");
+    }
+    return dryRunBranchVersion;
   }
   return branchVersion;
 }
@@ -557,8 +585,9 @@ const commit = process.env.GITHUB_SHA ?? "";
 const branch = process.env.GITHUB_REF_NAME ?? "";
 const stableBaseVersion =
   channel === "stable"
-    ? resolveStableBaseVersion(branch)
+    ? resolveStableBaseVersion(branch, stableDryRunMode)
     : resolvePrereleaseBaseVersion(branch, process.env.OPEN_DESIGN_STABLE_VERSION);
+const stableDryRunBranch = channel === "stable" && stableBaseVersion.branchKind === "release-dryrun";
 const packagedParsed = stableBaseVersion.parsed;
 if (stableBaseVersion.value !== packagedVersion) {
   fail(
@@ -638,6 +667,9 @@ if (channel === "prerelease") {
   releaseVersion = formatReleaseVersion("prerelease", packagedVersion, nextPrereleaseNumber);
   releaseName = `Open Design Prerelease ${releaseVersion}`;
   log(`latest prerelease: ${latestPrerelease.prereleaseVersion}`);
+} else if (stableDryRunBranch) {
+  stateSource = "release-dryrun branch (prerelease gate skipped)";
+  log("release-dryrun branch: skipping prerelease metadata validation for prepublish dry-run");
 } else {
   const stablePrerelease = await validateStablePrereleaseMetadata({
     branch: `release/v${stableBaseVersion.value}`,
diff --git a/tools/release/tests/channel-prepare.test.ts b/tools/release/tests/channel-prepare.test.ts
index a278f0134b4..e6c20d518ab 100644
--- a/tools/release/tests/channel-prepare.test.ts
+++ b/tools/release/tests/channel-prepare.test.ts
@@ -424,6 +424,61 @@ describe("tools-release local channel prepare validation", () => {
     }
   });
 
+  it("allows release-dryrun branches to run stable prepublish validation without prerelease metadata", async () => {
+    const packagedVersion = await readPackagedVersion();
+    const server = await startMetadataServer({});
+    const ghRoot = await mkdtemp(join(tmpdir(), "od-tools-release-gh-"));
+
+    try {
+      const fakeGh = await writeFakeGhScript(ghRoot);
+      const releaseNotesRoot = await writeReleaseNotesRoot(ghRoot, packagedVersion);
+      const stable = await runPrepare("stable", {
+        GITHUB_REF_NAME: `release-dryrun/v${packagedVersion}`,
+        GITHUB_REPOSITORY: "nexu-io/open-design",
+        GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+        OPEN_DESIGN_RELEASE_NOTES_ROOT: releaseNotesRoot,
+        OPEN_DESIGN_GH_NODE_SCRIPT: fakeGh,
+        OPEN_DESIGN_RELEASE_DRY_RUN: "prepublish",
+        OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: server.origin,
+        OPEN_DESIGN_STABLE_PRERELEASE_VERSION: "",
+      });
+
+      expect(stable.stdout).toContain("release-dryrun branch: skipping prerelease metadata validation for prepublish dry-run");
+      expect(stable.stdout).toContain("[release-stable] state source: release-dryrun branch (prerelease gate skipped)");
+      expect(stable.outputs.branch).toBe(`release-dryrun/v${packagedVersion}`);
+      expect(stable.outputs.dry_run).toBe("true");
+      expect(stable.outputs.dry_run_mode).toBe("prepublish");
+      expect(stable.outputs.github_release_enabled).toBe("false");
+      expect(stable.outputs.publish_side_effects_enabled).toBe("false");
+      expect(stable.outputs.run_prepublish_jobs).toBe("true");
+    } finally {
+      await server.close();
+      await rm(ghRoot, { force: true, recursive: true });
+    }
+  });
+
+  it("rejects release-dryrun branches outside stable prepublish validation", async () => {
+    const packagedVersion = await readPackagedVersion();
+    const ghRoot = await mkdtemp(join(tmpdir(), "od-tools-release-gh-"));
+
+    try {
+      const fakeGh = await writeFakeGhScript(ghRoot);
+      const releaseNotesRoot = await writeReleaseNotesRoot(ghRoot, packagedVersion);
+      await expect(runPrepare("stable", {
+        GITHUB_REF_NAME: `release-dryrun/v${packagedVersion}`,
+        GITHUB_REPOSITORY: "nexu-io/open-design",
+        GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+        OPEN_DESIGN_RELEASE_NOTES_ROOT: releaseNotesRoot,
+        OPEN_DESIGN_GH_NODE_SCRIPT: fakeGh,
+        OPEN_DESIGN_RELEASE_DRY_RUN: "false",
+        OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: "https://releases.example.test",
+        OPEN_DESIGN_STABLE_PRERELEASE_VERSION: "",
+      })).rejects.toThrow(/release-dryrun\/vX\.Y\.Z branches are only valid with OPEN_DESIGN_RELEASE_DRY_RUN=prepublish/);
+    } finally {
+      await rm(ghRoot, { force: true, recursive: true });
+    }
+  });
+
   it("prepares stable publish controls when dry-run is false", async () => {
     const packagedVersion = await readPackagedVersion();
     const prereleaseVersion = `${packagedVersion}-prerelease.2`;
@@ -506,7 +561,7 @@ describe("tools-release local channel prepare validation", () => {
     }
   });
 
-  it("requires stable promotion to run from the release version branch", async () => {
+  it("requires stable promotion to run from a release version branch", async () => {
     const packagedVersion = await readPackagedVersion();
     const prereleaseVersion = `${packagedVersion}-prerelease.2`;
     const objects: Record<string, unknown> = {};
@@ -524,7 +579,7 @@ describe("tools-release local channel prepare validation", () => {
         OPEN_DESIGN_RELEASE_DRY_RUN: "metadata",
         OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: server.origin,
         OPEN_DESIGN_STABLE_PRERELEASE_VERSION: prereleaseVersion,
-      })).rejects.toThrow(/requires GITHUB_REF_NAME to be release\/vX\.Y\.Z; got main/);
+      })).rejects.toThrow(/requires GITHUB_REF_NAME to be release\/vX\.Y\.Z or release-dryrun\/vX\.Y\.Z; got main/);
     } finally {
       await server.close();
       await rm(ghRoot, { force: true, recursive: true });

From f94d56cdd6678cff0560a909264b3f8b644178ee Mon Sep 17 00:00:00 2001
From: PerishCode <perishcode@gmail.com>
Date: Thu, 9 Jul 2026 16:02:00 +0800
Subject: [PATCH 3/5] Add updater release notes recovery flow

---
 .github/workflows/release-beta-s.yml          |  11 +
 .github/workflows/release-beta.yml            |  11 +
 .github/workflows/release-stable.yml          |   4 +
 apps/packaged/package.json                    |   2 +-
 apps/web/src/components/UpdaterPopup.tsx      | 118 +++----
 apps/web/src/i18n/locales/ar.ts               |   4 +
 apps/web/src/i18n/locales/de.ts               |   4 +
 apps/web/src/i18n/locales/en.ts               |   4 +
 apps/web/src/i18n/locales/es-ES.ts            |   4 +
 apps/web/src/i18n/locales/fa.ts               |   4 +
 apps/web/src/i18n/locales/fr.ts               |   4 +
 apps/web/src/i18n/locales/hu.ts               |   4 +
 apps/web/src/i18n/locales/id.ts               |   4 +
 apps/web/src/i18n/locales/it.ts               |   4 +
 apps/web/src/i18n/locales/ja.ts               |   4 +
 apps/web/src/i18n/locales/ko.ts               |   4 +
 apps/web/src/i18n/locales/pl.ts               |   4 +
 apps/web/src/i18n/locales/pt-BR.ts            |   4 +
 apps/web/src/i18n/locales/ru.ts               |   4 +
 apps/web/src/i18n/locales/th.ts               |   4 +
 apps/web/src/i18n/locales/tr.ts               |   4 +
 apps/web/src/i18n/locales/uk.ts               |   4 +
 apps/web/src/i18n/locales/zh-CN.ts            |   5 +
 apps/web/src/i18n/locales/zh-TW.ts            |   5 +
 apps/web/src/i18n/types.ts                    |   4 +
 apps/web/src/lib/updater.ts                   |  27 ++
 .../web/src/styles/workspace/mention-home.css | 137 ++++++++
 .../tests/components/UpdaterPopup.test.tsx    |  59 ++--
 apps/web/tests/lib/updater.test.ts            |  31 ++
 .../src/analytics/events/ui-click.ts          |   5 +-
 tools/pack/src/config.ts                      |  11 +
 tools/pack/src/web-sourcemaps.ts              |  14 +-
 tools/pack/tests/config.test.ts               |  18 ++
 tools/pack/tests/release-workflows.test.ts    |   9 +
 tools/pack/tests/web-sourcemaps.test.ts       |  27 +-
 tools/release/src/metadata/prepare-beta.ts    |  17 +-
 tools/release/src/metadata/prepare-betas.ts   |  17 +-
 tools/release/src/release-notes.ts            |  54 +++-
 tools/release/src/storage/publish-metadata.ts |  27 +-
 tools/release/tests/channel-prepare.test.ts   |  57 +++-
 tools/serve/src/index.ts                      |   3 +
 tools/serve/src/updater-fixture.ts            |  18 ++
 .../tests/release-metadata-publish.test.ts    | 301 +++++++++++++++++-
 tools/serve/tests/updater-fixture.test.ts     |   7 +
 44 files changed, 949 insertions(+), 118 deletions(-)

diff --git a/.github/workflows/release-beta-s.yml b/.github/workflows/release-beta-s.yml
index 32850d42fbf..19b669c8a02 100644
--- a/.github/workflows/release-beta-s.yml
+++ b/.github/workflows/release-beta-s.yml
@@ -33,6 +33,11 @@ on:
         required: false
         type: string
         default: ""
+      force_latest:
+        description: "Allow this run to move betas latest metadata backward. Use only for release metadata recovery."
+        required: true
+        type: boolean
+        default: false
       release_origin:
         description: "Release storage origin."
         required: true
@@ -192,6 +197,10 @@ on:
         required: false
         type: string
         default: ""
+      force_latest:
+        required: false
+        type: boolean
+        default: false
       release_origin:
         required: false
         type: string
@@ -473,6 +482,7 @@ jobs:
         env:
           GITHUB_REF_NAME: ${{ inputs.ref != '' && inputs.ref || github.ref_name }}
           GITHUB_SHA: ${{ steps.checkout.outputs.commit }}
+          OPEN_DESIGN_RELEASE_FORCE_LATEST: ${{ inputs.force_latest }}
         run: |
           set -euo pipefail
           if ! command -v rehash >/dev/null 2>&1; then
@@ -953,6 +963,7 @@ jobs:
           MAC_ARM64_RESULT: ${{ needs.build_mac_arm64.result }}
           MAC_X64_RESULT: skipped
           RELEASE_LATEST_CAS_REQUIRED: "true"
+          RELEASE_LATEST_FORCE: ${{ inputs.force_latest }}
           RELEASE_ASSET_SUFFIX: auto
           RELEASE_CHANNEL: betas
           RELEASE_MANIFEST_DIR: ${{ runner.temp }}/release-platform-manifests
diff --git a/.github/workflows/release-beta.yml b/.github/workflows/release-beta.yml
index d1ea6a72fed..238c4a17ee0 100644
--- a/.github/workflows/release-beta.yml
+++ b/.github/workflows/release-beta.yml
@@ -33,6 +33,11 @@ on:
         required: false
         type: string
         default: ""
+      force_latest:
+        description: "Allow this run to move beta latest metadata backward. Use only for release metadata recovery."
+        required: true
+        type: boolean
+        default: false
       release_origin:
         description: "Release storage origin."
         required: true
@@ -184,6 +189,10 @@ on:
         required: false
         type: string
         default: ""
+      force_latest:
+        required: false
+        type: boolean
+        default: false
       release_origin:
         required: false
         type: string
@@ -387,6 +396,7 @@ jobs:
         env:
           GITHUB_SHA: ${{ env.BUILT_SHA }}
           GITHUB_REF_NAME: ${{ inputs.ref != '' && inputs.ref || github.ref_name }}
+          OPEN_DESIGN_RELEASE_FORCE_LATEST: ${{ inputs.force_latest }}
         run: pnpm exec tools-release prepare beta
 
   build_mac_arm64:
@@ -1409,6 +1419,7 @@ jobs:
           MAC_X64_RESULT: ${{ needs.build_mac_x64.result }}
           RELEASE_ASSET_SUFFIX: ${{ needs.metadata.outputs.asset_version_suffix }}
           RELEASE_CHANNEL: beta
+          RELEASE_LATEST_FORCE: ${{ inputs.force_latest }}
           RELEASE_MANIFEST_DIR: ${{ runner.temp }}/release-platform-manifests
           RELEASE_METADATA_DIR: ${{ runner.temp }}/release-metadata
           RELEASE_OUTPUTS_PATH: ${{ runner.temp }}/release-metadata/outputs.json
diff --git a/.github/workflows/release-stable.yml b/.github/workflows/release-stable.yml
index 2cff1a867ee..02d6ac57113 100644
--- a/.github/workflows/release-stable.yml
+++ b/.github/workflows/release-stable.yml
@@ -302,6 +302,7 @@ jobs:
     runs-on: macos-14
     env:
       GH_TOKEN: ${{ github.token }}
+      RELEASE_PUBLISH_SIDE_EFFECTS: ${{ needs.metadata.outputs.publish_side_effects_enabled }}
     steps:
       - name: Checkout
         uses: actions/checkout@v6.0.2
@@ -559,6 +560,7 @@ jobs:
     runs-on: macos-15-intel
     env:
       GH_TOKEN: ${{ github.token }}
+      RELEASE_PUBLISH_SIDE_EFFECTS: ${{ needs.metadata.outputs.publish_side_effects_enabled }}
     steps:
       - name: Checkout
         uses: actions/checkout@v6.0.2
@@ -673,6 +675,7 @@ jobs:
     runs-on: windows-latest
     env:
       GH_TOKEN: ${{ github.token }}
+      RELEASE_PUBLISH_SIDE_EFFECTS: ${{ needs.metadata.outputs.publish_side_effects_enabled }}
     steps:
       - name: Checkout
         uses: actions/checkout@v6.0.2
@@ -929,6 +932,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       GH_TOKEN: ${{ github.token }}
+      RELEASE_PUBLISH_SIDE_EFFECTS: ${{ needs.metadata.outputs.publish_side_effects_enabled }}
     steps:
       - name: Checkout
         uses: actions/checkout@v6.0.2
diff --git a/apps/packaged/package.json b/apps/packaged/package.json
index 68ef8b9f3c8..18e00f0557f 100644
--- a/apps/packaged/package.json
+++ b/apps/packaged/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@open-design/packaged",
-  "version": "0.14.2",
+  "version": "0.14.1",
   "private": true,
   "type": "module",
   "main": "./dist/index.mjs",
diff --git a/apps/web/src/components/UpdaterPopup.tsx b/apps/web/src/components/UpdaterPopup.tsx
index 036e3ece856..4ee20c6b80d 100644
--- a/apps/web/src/components/UpdaterPopup.tsx
+++ b/apps/web/src/components/UpdaterPopup.tsx
@@ -8,15 +8,13 @@ import {
   deriveUpdaterModel,
   openUpdaterInstaller,
   quitAfterUpdaterInstallerOpen,
-  releaseNoteCandidatesFromStatus,
+  releaseNotesJumpToFromStatus,
   readUpdaterStatus,
   subscribeToUpdaterStatus,
-  type UpdaterReleaseNoteCandidate,
   type UpdaterModel,
 } from '../lib/updater';
 import { useI18n } from '../i18n';
 import type { Dict } from '../i18n/types';
-import { renderMarkdown } from '../runtime/markdown';
 import { useAnalytics, useAppVersion } from '../analytics/provider';
 import {
   trackUpdateIndicatorClick,
@@ -24,13 +22,11 @@ import {
   trackUpdateInstallResult,
   trackUpdatePromptSurfaceView,
 } from '../analytics/events';
+import { openExternalUrl } from '../providers/registry';
 
 const INSTALL_HANDOFF_WATCHDOG_MS = 10_000;
 
 type InstallState = 'idle' | 'opening' | 'handoff' | 'recoverable';
-type ReleaseNotesState =
-  | { state: 'idle' | 'loading' | 'empty' }
-  | { candidate: UpdaterReleaseNoteCandidate; state: 'ready'; text: string };
 type Translator = (key: keyof Dict, vars?: Record<string, string | number>) => string;
 
 function versionText(t: Translator, model: UpdaterModel): string {
@@ -75,14 +71,14 @@ function updaterErrorCode(model: UpdaterModel): string | undefined {
 }
 
 export function UpdaterPopup() {
-  const { locale, t } = useI18n();
+  const { t } = useI18n();
   const wrapRef = useRef<HTMLDivElement | null>(null);
   const actionInFlightRef = useRef(false);
   const handoffWatchdogRef = useRef<number | null>(null);
   const [model, setModel] = useState<UpdaterModel>(() => deriveUpdaterModel(null));
   const [panelOpen, setPanelOpen] = useState(false);
+  const [panelExpanded, setPanelExpanded] = useState(true);
   const [installState, setInstallState] = useState<InstallState>('idle');
-  const [releaseNotesState, setReleaseNotesState] = useState<ReleaseNotesState>({ state: 'idle' });
 
   const clearHandoffWatchdog = useCallback(() => {
     if (handoffWatchdogRef.current == null) return;
@@ -94,6 +90,7 @@ export function UpdaterPopup() {
     handoffWatchdogRef.current = null;
     actionInFlightRef.current = false;
     setInstallState('recoverable');
+    setPanelExpanded(true);
     setPanelOpen(true);
   }, []);
 
@@ -133,20 +130,16 @@ export function UpdaterPopup() {
   const showControl = ready || installState !== 'idle';
   const controlLabel = model.updateKind === 'payload' ? t('updater.installRestart') : t('updater.openInstaller');
   const channelLabel = channelLabelFor(model.status?.channel);
-  const releaseNoteCandidates = useMemo(
-    () => releaseNoteCandidatesFromStatus(model.status, locale),
-    [locale, model.status],
-  );
-  const releaseNoteCandidatesKey = useMemo(
-    () => releaseNoteCandidates.map((candidate) => `${candidate.format}:${candidate.url}`).join('|'),
-    [releaseNoteCandidates],
-  );
   const analytics = useAnalytics();
   const appVersionBefore = useAppVersion();
   const versionProps = useMemo(
     () => updateVersionProps(model, appVersionBefore),
     [appVersionBefore, model.availableVersion],
   );
+  const releaseNotesJumpTo = useMemo(
+    () => releaseNotesJumpToFromStatus(model.status),
+    [model.status],
+  );
 
   const indicatorSurfaceKey = `${model.currentVersion ?? 'unknown'}->${model.availableVersion ?? 'unknown'}:${model.status?.downloadPath ?? 'unknown'}`;
   const lastIndicatorSurfaceKeyRef = useRef<string | null>(null);
@@ -180,39 +173,6 @@ export function UpdaterPopup() {
     });
   }, [analytics.track, promptSurfaceKey, versionProps]);
 
-  useEffect(() => {
-    if (!panelOpen || releaseNoteCandidates.length === 0) {
-      setReleaseNotesState({ state: 'idle' });
-      return;
-    }
-
-    let cancelled = false;
-    setReleaseNotesState({ state: 'loading' });
-
-    const load = async () => {
-      for (const candidate of releaseNoteCandidates) {
-        try {
-          const response = await fetch(candidate.url, {
-            headers: { 'Cache-Control': 'no-cache' },
-          });
-          if (!response.ok) continue;
-          const text = await response.text();
-          if (cancelled) return;
-          setReleaseNotesState({ candidate, state: 'ready', text });
-          return;
-        } catch {
-          // Try the next metadata-provided fallback URL.
-        }
-      }
-      if (!cancelled) setReleaseNotesState({ state: 'empty' });
-    };
-
-    void load();
-    return () => {
-      cancelled = true;
-    };
-  }, [panelOpen, releaseNoteCandidates, releaseNoteCandidatesKey]);
-
   const close = useCallback(() => {
     if (installBusy) return;
     trackUpdateIndicatorClick(analytics.track, {
@@ -248,6 +208,7 @@ export function UpdaterPopup() {
     actionInFlightRef.current = true;
     clearHandoffWatchdog();
     setInstallState('opening');
+    setPanelExpanded(true);
     setPanelOpen(true);
     trackUpdateIndicatorClick(analytics.track, {
       page_name: 'home',
@@ -312,6 +273,18 @@ export function UpdaterPopup() {
     }
   };
 
+  const openReleaseNotes = useCallback(() => {
+    if (releaseNotesJumpTo == null) return;
+    trackUpdateIndicatorClick(analytics.track, {
+      page_name: 'home',
+      area: 'update_prompt',
+      element: 'release_notes',
+      action: 'open_link',
+      ...versionProps,
+    });
+    void openExternalUrl(releaseNotesJumpTo.url);
+  }, [analytics.track, releaseNotesJumpTo, versionProps]);
+
   if (!showControl) return null;
 
   return (
@@ -338,6 +311,7 @@ export function UpdaterPopup() {
             action: 'open_prompt',
             ...versionProps,
           });
+          setPanelExpanded(true);
           setPanelOpen(true);
         }}
       >
@@ -349,7 +323,7 @@ export function UpdaterPopup() {
         {panelOpen ? (
           <motion.section
             aria-labelledby="updater-popup-title"
-            className="updater-popup is-ready"
+            className={`updater-popup is-ready${panelExpanded ? ' updater-popup--expanded' : ' updater-popup--compact'}`}
             data-testid="updater-popup"
             role="dialog"
             variants={popoverIn}
@@ -360,28 +334,36 @@ export function UpdaterPopup() {
             <div className="updater-popup__icon">
               <Icon name="arrow-up" size={20} strokeWidth={2.2} />
             </div>
+            <div className="updater-popup__tools">
+              <button
+                aria-label={panelExpanded ? t('updater.compactDetails') : t('updater.expandDetails')}
+                className="updater-popup__icon-button"
+                data-testid="updater-popup-size-button"
+                title={panelExpanded ? t('updater.compactDetails') : t('updater.expandDetails')}
+                type="button"
+                onClick={() => setPanelExpanded((current) => !current)}
+              >
+                <Icon name={panelExpanded ? 'minimize' : 'maximize'} size={15} strokeWidth={1.9} />
+              </button>
+            </div>
             <div className="updater-popup__body">
               <h2 id="updater-popup-title">{t('updater.ready')}</h2>
               <p>{versionText(t, model)}</p>
               {channelLabel != null ? <span className="updater-popup__badge">{channelLabel}</span> : null}
-              {releaseNotesState.state === 'ready' ? (
-                <div
-                  className={`updater-popup__release-notes updater-popup__release-notes--${releaseNotesState.candidate.format}`}
-                  data-testid="updater-release-notes"
-                >
-                  {releaseNotesState.candidate.format === 'html' ? (
-                    <iframe
-                      sandbox=""
-                      srcDoc={releaseNotesState.text}
-                      title={t('updater.ready')}
-                    />
-                  ) : (
-                    <div className="prose-block">
-                      {renderMarkdown(releaseNotesState.text)}
-                    </div>
-                  )}
-                </div>
-              ) : null}
+              <div className="updater-popup__release-notes" data-testid="updater-release-notes">
+                <p>{t('updater.releaseNotesPreview')}</p>
+                {releaseNotesJumpTo != null ? (
+                  <button
+                    className="updater-popup__release-notes-jump"
+                    data-testid="updater-release-notes-jump"
+                    type="button"
+                    onClick={openReleaseNotes}
+                  >
+                    {t('updater.viewFullReleaseNotes')}
+                    <Icon name="external-link" size={12} strokeWidth={2} />
+                  </button>
+                ) : null}
+              </div>
             </div>
             <div className="updater-popup__actions">
               <button className="updater-popup__button" disabled={installBusy} type="button" onClick={close}>
diff --git a/apps/web/src/i18n/locales/ar.ts b/apps/web/src/i18n/locales/ar.ts
index 806b91ae6ab..b6d858b5963 100644
--- a/apps/web/src/i18n/locales/ar.ts
+++ b/apps/web/src/i18n/locales/ar.ts
@@ -3546,6 +3546,8 @@ export const ar: Dict = {
   'updater.downloading': 'جارٍ تنزيل التحديث',
   'updater.downloadingPercent': 'جارٍ تنزيل التحديث {percent}%',
   'updater.done': 'تم',
+  'updater.expandDetails': 'توسيع تفاصيل التحديث',
+  'updater.compactDetails': 'إظهار مطالبة التحديث المصغرة',
   'updater.failed': 'فشل التحديث',
   'updater.installerOpenBody': 'المثبت مفتوح. يتم الآن إنهاء Open Design لتتمكن من إكمال التحديث.',
   'updater.installerOpened': 'تم فتح المثبت',
@@ -3564,6 +3566,8 @@ export const ar: Dict = {
   'updater.ready': 'التحديث جاهز',
   'updater.readyGeneric': 'إصدار جديد جاهز. سيتم إغلاق Open Design وفتح المثبت.',
   'updater.readyVersion': 'Open Design {version} جاهز. سيتم إغلاق Open Design وفتح المثبت.',
+  'updater.releaseNotesPreview': 'معاينة ملاحظات الإصدار\n\nتعرض هذه المطالبة نصًا محليًا ثابتًا أثناء التحقق من واجهة التحديث الموسعة.\n\nما زال إجراء التثبيت يستخدم تسليم محدّث الحزمة. يتم تجاوز ملاحظات الإصدار البعيدة بصيغتي HTML وMarkdown مؤقتًا.',
+  'updater.viewFullReleaseNotes': 'عرض ملاحظات الإصدار كاملة',
   'updater.upToDate': 'أنت تستخدم أحدث إصدار بالفعل.',
   'newsletter.label': 'النشرة (اختياري)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/de.ts b/apps/web/src/i18n/locales/de.ts
index 852a8ef9801..46b1d1cf020 100644
--- a/apps/web/src/i18n/locales/de.ts
+++ b/apps/web/src/i18n/locales/de.ts
@@ -3546,6 +3546,8 @@ export const de: Dict = {
   'updater.downloading': 'Update wird heruntergeladen',
   'updater.downloadingPercent': 'Update wird heruntergeladen {percent}%',
   'updater.done': 'Fertig',
+  'updater.expandDetails': 'Update-Details erweitern',
+  'updater.compactDetails': 'Kompakte Update-Meldung anzeigen',
   'updater.failed': 'Update fehlgeschlagen',
   'updater.installerOpenBody': 'Der Installer ist geöffnet. Open Design wird beendet, damit Sie das Update abschließen können.',
   'updater.installerOpened': 'Installer geöffnet',
@@ -3564,6 +3566,8 @@ export const de: Dict = {
   'updater.ready': 'Update bereit',
   'updater.readyGeneric': 'Eine neue Version ist bereit. Open Design wird geschlossen und der Installer geöffnet.',
   'updater.readyVersion': 'Open Design {version} ist bereit. Open Design wird geschlossen und der Installer geöffnet.',
+  'updater.releaseNotesPreview': 'Vorschau der Versionshinweise\n\nDiese Meldung zeigt lokalen konstanten Text, während die erweiterte Updater-Oberfläche validiert wird.\n\nDie Installationsaktion nutzt weiterhin die Übergabe des paketierten Updaters. Entfernte HTML- und Markdown-Versionshinweise werden vorerst bewusst umgangen.',
+  'updater.viewFullReleaseNotes': 'Vollständige Versionshinweise',
   'updater.upToDate': 'Sie verwenden bereits die neueste Version.',
   'newsletter.label': 'Newsletter (optional)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/en.ts b/apps/web/src/i18n/locales/en.ts
index 61021f7755a..811349dfeca 100644
--- a/apps/web/src/i18n/locales/en.ts
+++ b/apps/web/src/i18n/locales/en.ts
@@ -3622,6 +3622,8 @@ export const en: Dict = {
   'updater.downloading': 'Downloading update',
   'updater.downloadingPercent': 'Downloading update {percent}%',
   'updater.done': 'Done',
+  'updater.expandDetails': 'Expand update details',
+  'updater.compactDetails': 'Show compact update prompt',
   'updater.failed': 'Update failed',
   'updater.installerOpenBody': 'The installer is open. Open Design is quitting so you can finish the update.',
   'updater.installerOpened': 'Installer opened',
@@ -3640,6 +3642,8 @@ export const en: Dict = {
   'updater.ready': 'Update ready',
   'updater.readyGeneric': 'A new version is ready. Open Design will close and open the installer.',
   'updater.readyVersion': 'Open Design {version} is ready. Open Design will close and open the installer.',
+  'updater.releaseNotesPreview': 'Release notes preview\n\nThis prompt is rendering local constant text while the expanded updater UI is validated.\n\nThe install action still uses the packaged updater handoff. Remote HTML and Markdown release notes are intentionally bypassed here for now.',
+  'updater.viewFullReleaseNotes': 'View full release notes',
   'updater.upToDate': 'You\'re already on the latest version.',
   'newsletter.label': 'Newsletter (optional)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/es-ES.ts b/apps/web/src/i18n/locales/es-ES.ts
index f1dcdb78409..969b791d2bd 100644
--- a/apps/web/src/i18n/locales/es-ES.ts
+++ b/apps/web/src/i18n/locales/es-ES.ts
@@ -3546,6 +3546,8 @@ export const esES: Dict = {
   'updater.downloading': 'Descargando actualización',
   'updater.downloadingPercent': 'Descargando actualización {percent}%',
   'updater.done': 'Listo',
+  'updater.expandDetails': 'Expandir detalles de la actualización',
+  'updater.compactDetails': 'Mostrar aviso de actualización compacto',
   'updater.failed': 'Error de actualización',
   'updater.installerOpenBody': 'El instalador está abierto. Open Design se está cerrando para que puedas completar la actualización.',
   'updater.installerOpened': 'Instalador abierto',
@@ -3564,6 +3566,8 @@ export const esES: Dict = {
   'updater.ready': 'Actualización lista',
   'updater.readyGeneric': 'Hay una nueva versión lista. Open Design se cerrará y abrirá el instalador.',
   'updater.readyVersion': 'Open Design {version} está listo. Open Design se cerrará y abrirá el instalador.',
+  'updater.releaseNotesPreview': 'Vista previa de las notas de la versión\n\nEste aviso muestra texto constante local mientras se valida la interfaz ampliada del actualizador.\n\nLa acción de instalación sigue usando la entrega del actualizador empaquetado. Las notas remotas en HTML y Markdown se omiten intencionalmente por ahora.',
+  'updater.viewFullReleaseNotes': 'Ver notas completas',
   'updater.upToDate': 'Ya tienes la versión más reciente.',
   'newsletter.label': 'Newsletter (opcional)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/fa.ts b/apps/web/src/i18n/locales/fa.ts
index aaaa3bd5267..a500e18c331 100644
--- a/apps/web/src/i18n/locales/fa.ts
+++ b/apps/web/src/i18n/locales/fa.ts
@@ -3474,6 +3474,8 @@ export const fa: Dict = {
   'updater.downloading': 'در حال دانلود به‌روزرسانی',
   'updater.downloadingPercent': 'در حال دانلود به‌روزرسانی {percent}%',
   'updater.done': 'انجام شد',
+  'updater.expandDetails': 'باز کردن جزئیات به‌روزرسانی',
+  'updater.compactDetails': 'نمایش اعلان فشرده به‌روزرسانی',
   'updater.failed': 'به‌روزرسانی ناموفق بود',
   'updater.installerOpenBody': 'نصب‌کننده باز است. Open Design در حال بسته شدن است تا بتوانید به‌روزرسانی را کامل کنید.',
   'updater.installerOpened': 'نصب‌کننده باز شد',
@@ -3492,6 +3494,8 @@ export const fa: Dict = {
   'updater.ready': 'به‌روزرسانی آماده است',
   'updater.readyGeneric': 'نسخه جدید آماده است. Open Design بسته می‌شود و نصب‌کننده را باز می‌کند.',
   'updater.readyVersion': 'Open Design {version} آماده است. Open Design بسته می‌شود و نصب‌کننده را باز می‌کند.',
+  'updater.releaseNotesPreview': 'پیش‌نمایش یادداشت‌های انتشار\n\nاین اعلان هنگام اعتبارسنجی رابط بزرگ‌شده به‌روزرسان، متن ثابت محلی را نمایش می‌دهد.\n\nاقدام نصب همچنان از تحویل به‌روزرسان بسته‌بندی‌شده استفاده می‌کند. یادداشت‌های انتشار راه‌دور HTML و Markdown فعلاً عمداً نادیده گرفته می‌شوند.',
+  'updater.viewFullReleaseNotes': 'مشاهده یادداشت‌های کامل',
   'updater.upToDate': 'شما هم‌اکنون آخرین نسخه را دارید.',
   'newsletter.label': 'Newsletter (optional)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/fr.ts b/apps/web/src/i18n/locales/fr.ts
index 58d31c5d7ae..828eb7dd9e6 100644
--- a/apps/web/src/i18n/locales/fr.ts
+++ b/apps/web/src/i18n/locales/fr.ts
@@ -3608,6 +3608,8 @@ export const fr: Dict = {
   'updater.downloading': 'Téléchargement de la mise à jour',
   'updater.downloadingPercent': 'Téléchargement de la mise à jour {percent}%',
   'updater.done': 'Terminé',
+  'updater.expandDetails': 'Développer les détails de la mise à jour',
+  'updater.compactDetails': 'Afficher l’invite de mise à jour compacte',
   'updater.failed': 'Échec de la mise à jour',
   'updater.installerOpenBody': 'Le programme d’installation est ouvert. Open Design est en train de quitter pour vous permettre de terminer la mise à jour.',
   'updater.installerOpened': 'Programme d’installation ouvert',
@@ -3626,6 +3628,8 @@ export const fr: Dict = {
   'updater.ready': 'Mise à jour prête',
   'updater.readyGeneric': 'Une nouvelle version est prête. Open Design va se fermer et ouvrir le programme d’installation.',
   'updater.readyVersion': 'Open Design {version} est prêt. Open Design va se fermer et ouvrir le programme d’installation.',
+  'updater.releaseNotesPreview': 'Aperçu des notes de version\n\nCette invite affiche un texte constant local pendant la validation de l’interface de mise à jour développée.\n\nL’action d’installation utilise toujours le relais du programme de mise à jour empaqueté. Les notes de version distantes HTML et Markdown sont volontairement ignorées pour le moment.',
+  'updater.viewFullReleaseNotes': 'Voir les notes complètes',
   'updater.upToDate': 'Vous utilisez déjà la dernière version.',
   'newsletter.label': 'Newsletter (facultatif)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/hu.ts b/apps/web/src/i18n/locales/hu.ts
index 1d0b09da63f..61699557e9b 100644
--- a/apps/web/src/i18n/locales/hu.ts
+++ b/apps/web/src/i18n/locales/hu.ts
@@ -3546,6 +3546,8 @@ export const hu: Dict = {
   'updater.downloading': 'Frissítés letöltése',
   'updater.downloadingPercent': 'Frissítés letöltése {percent}%',
   'updater.done': 'Kész',
+  'updater.expandDetails': 'Frissítés részleteinek kibontása',
+  'updater.compactDetails': 'Kompakt frissítési panel megjelenítése',
   'updater.failed': 'A frissítés sikertelen',
   'updater.installerOpenBody': 'A telepítő meg van nyitva. Az Open Design kilép, hogy befejezhesse a frissítést.',
   'updater.installerOpened': 'Telepítő megnyitva',
@@ -3564,6 +3566,8 @@ export const hu: Dict = {
   'updater.ready': 'Frissítés kész',
   'updater.readyGeneric': 'Elkészült az új verzió. Az Open Design bezárul, és megnyitja a telepítőt.',
   'updater.readyVersion': 'Az Open Design {version} elkészült. Az Open Design bezárul, és megnyitja a telepítőt.',
+  'updater.releaseNotesPreview': 'Kiadási megjegyzések előnézete\n\nEz a panel helyi állandó szöveget jelenít meg, miközben a kibővített frissítési felületet ellenőrizzük.\n\nA telepítési művelet továbbra is a csomagolt frissítő átadását használja. A távoli HTML- és Markdown-kiadási megjegyzéseket most szándékosan megkerüljük.',
+  'updater.viewFullReleaseNotes': 'Teljes kiadási jegyzetek',
   'updater.upToDate': 'Már a legújabb verziót használja.',
   'newsletter.label': 'Newsletter (optional)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/id.ts b/apps/web/src/i18n/locales/id.ts
index 5df560f7143..f8872d3afb8 100644
--- a/apps/web/src/i18n/locales/id.ts
+++ b/apps/web/src/i18n/locales/id.ts
@@ -3608,6 +3608,8 @@ export const id: Dict = {
   'updater.downloading': 'Mengunduh update',
   'updater.downloadingPercent': 'Mengunduh update {percent}%',
   'updater.done': 'Selesai',
+  'updater.expandDetails': 'Perluas detail update',
+  'updater.compactDetails': 'Tampilkan prompt update ringkas',
   'updater.failed': 'Update gagal',
   'updater.installerOpenBody': 'Installer sudah terbuka. Open Design sedang ditutup agar Anda dapat menyelesaikan pembaruan.',
   'updater.installerOpened': 'Installer terbuka',
@@ -3626,6 +3628,8 @@ export const id: Dict = {
   'updater.ready': 'Update siap',
   'updater.readyGeneric': 'Versi baru siap. Open Design akan ditutup dan membuka installer.',
   'updater.readyVersion': 'Open Design {version} siap. Open Design akan ditutup dan membuka installer.',
+  'updater.releaseNotesPreview': 'Pratinjau catatan rilis\n\nPrompt ini merender teks konstan lokal saat UI updater yang diperluas divalidasi.\n\nAksi instal tetap memakai handoff updater paket. Catatan rilis HTML dan Markdown jarak jauh sengaja dilewati untuk sementara.',
+  'updater.viewFullReleaseNotes': 'Lihat catatan lengkap',
   'updater.upToDate': 'Anda sudah menggunakan versi terbaru.',
   'newsletter.label': 'Newsletter (optional)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/it.ts b/apps/web/src/i18n/locales/it.ts
index 40213e79e65..2c45a333705 100644
--- a/apps/web/src/i18n/locales/it.ts
+++ b/apps/web/src/i18n/locales/it.ts
@@ -3546,6 +3546,8 @@ export const it: Dict = {
   'updater.downloading': 'Download aggiornamento',
   'updater.downloadingPercent': 'Download aggiornamento {percent}%',
   'updater.done': 'Fatto',
+  'updater.expandDetails': 'Espandi dettagli aggiornamento',
+  'updater.compactDetails': 'Mostra prompt aggiornamento compatto',
   'updater.failed': 'Aggiornamento non riuscito',
   'updater.installerOpenBody': 'Il programma di installazione è aperto. Open Design si sta chiudendo per consentirti di completare l’aggiornamento.',
   'updater.installerOpened': 'Programma di installazione aperto',
@@ -3564,6 +3566,8 @@ export const it: Dict = {
   'updater.ready': 'Aggiornamento pronto',
   'updater.readyGeneric': 'È pronta una nuova versione. Open Design si chiuderà e aprirà il programma di installazione.',
   'updater.readyVersion': 'Open Design {version} è pronto. Open Design si chiuderà e aprirà il programma di installazione.',
+  'updater.releaseNotesPreview': 'Anteprima note di rilascio\n\nQuesto prompt mostra testo costante locale mentre viene validata l’interfaccia estesa dell’updater.\n\nL’azione di installazione usa ancora il passaggio all’updater pacchettizzato. Le note di rilascio remote HTML e Markdown sono intenzionalmente ignorate per ora.',
+  'updater.viewFullReleaseNotes': 'Vedi note complete',
   'updater.upToDate': 'Hai già la versione più recente.',
   'newsletter.label': 'Newsletter (opzionale)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/ja.ts b/apps/web/src/i18n/locales/ja.ts
index 5e22ea95392..8179ea78e0a 100644
--- a/apps/web/src/i18n/locales/ja.ts
+++ b/apps/web/src/i18n/locales/ja.ts
@@ -3546,6 +3546,8 @@ export const ja: Dict = {
   'updater.downloading': 'アップデートをダウンロード中',
   'updater.downloadingPercent': 'アップデートをダウンロード中 {percent}%',
   'updater.done': '完了',
+  'updater.expandDetails': 'アップデート詳細を展開',
+  'updater.compactDetails': 'コンパクトなアップデート表示にする',
   'updater.failed': 'アップデートに失敗しました',
   'updater.installerOpenBody': 'インストーラーが開いています。更新を完了できるよう Open Design を終了しています。',
   'updater.installerOpened': 'インストーラーを開きました',
@@ -3564,6 +3566,8 @@ export const ja: Dict = {
   'updater.ready': 'アップデート準備完了',
   'updater.readyGeneric': '新しいバージョンの準備ができました。Open Design を閉じてインストーラーを開きます。',
   'updater.readyVersion': 'Open Design {version} の準備ができました。Open Design を閉じてインストーラーを開きます。',
+  'updater.releaseNotesPreview': 'リリースノートのプレビュー\n\n拡張されたアップデーター UI の検証中、このプロンプトはローカルの定数テキストを表示しています。\n\nインストール操作は引き続きパッケージ済みアップデーターへの引き渡しを使います。リモートの HTML / Markdown リリースノートは今は意図的に迂回しています。',
+  'updater.viewFullReleaseNotes': '完全なリリースノート',
   'updater.upToDate': 'すでに最新バージョンです。',
   'newsletter.label': 'ニュースレター（任意）',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/ko.ts b/apps/web/src/i18n/locales/ko.ts
index 6f7fcca9f4a..f97b6b70090 100644
--- a/apps/web/src/i18n/locales/ko.ts
+++ b/apps/web/src/i18n/locales/ko.ts
@@ -3546,6 +3546,8 @@ export const ko: Dict = {
   'updater.downloading': '업데이트 다운로드 중',
   'updater.downloadingPercent': '업데이트 다운로드 중 {percent}%',
   'updater.done': '완료',
+  'updater.expandDetails': '업데이트 세부 정보 펼치기',
+  'updater.compactDetails': '작은 업데이트 프롬프트 표시',
   'updater.failed': '업데이트 실패',
   'updater.installerOpenBody': '설치 프로그램이 열려 있습니다. 업데이트를 완료할 수 있도록 Open Design을 종료하는 중입니다.',
   'updater.installerOpened': '설치 프로그램 열림',
@@ -3564,6 +3566,8 @@ export const ko: Dict = {
   'updater.ready': '업데이트 준비됨',
   'updater.readyGeneric': '새 버전이 준비되었습니다. Open Design을 닫고 설치 프로그램을 엽니다.',
   'updater.readyVersion': 'Open Design {version}이 준비되었습니다. Open Design을 닫고 설치 프로그램을 엽니다.',
+  'updater.releaseNotesPreview': '릴리스 노트 미리보기\n\n확장된 업데이터 UI를 검증하는 동안 이 프롬프트는 로컬 상수 텍스트를 렌더링합니다.\n\n설치 작업은 계속 패키지된 업데이터 핸드오프를 사용합니다. 원격 HTML 및 Markdown 릴리스 노트는 현재 의도적으로 우회합니다.',
+  'updater.viewFullReleaseNotes': '전체 릴리스 노트 보기',
   'updater.upToDate': '이미 최신 버전입니다.',
   'newsletter.label': '뉴스레터(선택)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/pl.ts b/apps/web/src/i18n/locales/pl.ts
index ae8ecad443b..e9b3b882b10 100644
--- a/apps/web/src/i18n/locales/pl.ts
+++ b/apps/web/src/i18n/locales/pl.ts
@@ -3546,6 +3546,8 @@ export const pl: Dict = {
   'updater.downloading': 'Pobieranie aktualizacji',
   'updater.downloadingPercent': 'Pobieranie aktualizacji {percent}%',
   'updater.done': 'Gotowe',
+  'updater.expandDetails': 'Rozwiń szczegóły aktualizacji',
+  'updater.compactDetails': 'Pokaż kompaktowy komunikat aktualizacji',
   'updater.failed': 'Aktualizacja nie powiodła się',
   'updater.installerOpenBody': 'Instalator jest otwarty. Open Design zamyka się, aby można było dokończyć aktualizację.',
   'updater.installerOpened': 'Instalator otwarty',
@@ -3564,6 +3566,8 @@ export const pl: Dict = {
   'updater.ready': 'Aktualizacja gotowa',
   'updater.readyGeneric': 'Nowa wersja jest gotowa. Open Design zamknie się i otworzy instalator.',
   'updater.readyVersion': 'Open Design {version} jest gotowy. Open Design zamknie się i otworzy instalator.',
+  'updater.releaseNotesPreview': 'Podgląd informacji o wydaniu\n\nTen komunikat renderuje lokalny stały tekst podczas walidacji rozszerzonego interfejsu aktualizatora.\n\nAkcja instalacji nadal używa przekazania do spakowanego aktualizatora. Zdalne informacje HTML i Markdown są na razie celowo pomijane.',
+  'updater.viewFullReleaseNotes': 'Zobacz pełne informacje',
   'updater.upToDate': 'Masz już najnowszą wersję.',
   'newsletter.label': 'Newsletter (opcjonalnie)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/pt-BR.ts b/apps/web/src/i18n/locales/pt-BR.ts
index 77cf867cd80..a80b57b1e0f 100644
--- a/apps/web/src/i18n/locales/pt-BR.ts
+++ b/apps/web/src/i18n/locales/pt-BR.ts
@@ -3546,6 +3546,8 @@ export const ptBR: Dict = {
   'updater.downloading': 'Baixando atualização',
   'updater.downloadingPercent': 'Baixando atualização {percent}%',
   'updater.done': 'Concluído',
+  'updater.expandDetails': 'Expandir detalhes da atualização',
+  'updater.compactDetails': 'Mostrar aviso de atualização compacto',
   'updater.failed': 'Falha na atualização',
   'updater.installerOpenBody': 'O instalador está aberto. O Open Design está saindo para que você conclua a atualização.',
   'updater.installerOpened': 'Instalador aberto',
@@ -3564,6 +3566,8 @@ export const ptBR: Dict = {
   'updater.ready': 'Atualização pronta',
   'updater.readyGeneric': 'Uma nova versão está pronta. O Open Design será fechado e abrirá o instalador.',
   'updater.readyVersion': 'Open Design {version} está pronto. O Open Design será fechado e abrirá o instalador.',
+  'updater.releaseNotesPreview': 'Prévia das notas da versão\n\nEste aviso renderiza texto constante local enquanto a UI expandida do atualizador é validada.\n\nA ação de instalação ainda usa o handoff do atualizador empacotado. As notas remotas em HTML e Markdown são ignoradas intencionalmente por enquanto.',
+  'updater.viewFullReleaseNotes': 'Ver notas completas',
   'updater.upToDate': 'Você já está na versão mais recente.',
   'newsletter.label': 'Newsletter (opcional)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/ru.ts b/apps/web/src/i18n/locales/ru.ts
index 7e61de84aba..edd6b385a96 100644
--- a/apps/web/src/i18n/locales/ru.ts
+++ b/apps/web/src/i18n/locales/ru.ts
@@ -3546,6 +3546,8 @@ export const ru: Dict = {
   'updater.downloading': 'Загрузка обновления',
   'updater.downloadingPercent': 'Загрузка обновления {percent}%',
   'updater.done': 'Готово',
+  'updater.expandDetails': 'Развернуть сведения об обновлении',
+  'updater.compactDetails': 'Показать компактное окно обновления',
   'updater.failed': 'Обновление не удалось',
   'updater.installerOpenBody': 'Установщик открыт. Open Design закрывается, чтобы вы могли завершить обновление.',
   'updater.installerOpened': 'Установщик открыт',
@@ -3564,6 +3566,8 @@ export const ru: Dict = {
   'updater.ready': 'Обновление готово',
   'updater.readyGeneric': 'Новая версия готова. Open Design закроется и откроет установщик.',
   'updater.readyVersion': 'Open Design {version} готов. Open Design закроется и откроет установщик.',
+  'updater.releaseNotesPreview': 'Предпросмотр примечаний к выпуску\n\nЭто окно показывает локальный постоянный текст, пока проверяется расширенный интерфейс обновления.\n\nДействие установки по-прежнему использует передачу в пакетный обновитель. Удаленные HTML- и Markdown-примечания к выпуску сейчас намеренно обходятся.',
+  'updater.viewFullReleaseNotes': 'Полные примечания к выпуску',
   'updater.upToDate': 'У вас уже установлена последняя версия.',
   'newsletter.label': 'Рассылка (необязательно)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/th.ts b/apps/web/src/i18n/locales/th.ts
index 7e2d0b52f3c..62452e593fe 100644
--- a/apps/web/src/i18n/locales/th.ts
+++ b/apps/web/src/i18n/locales/th.ts
@@ -3608,6 +3608,8 @@ export const th: Dict = {
   'updater.downloading': 'กำลังดาวน์โหลดอัปเดต',
   'updater.downloadingPercent': 'กำลังดาวน์โหลดอัปเดต {percent}%',
   'updater.done': 'เสร็จสิ้น',
+  'updater.expandDetails': 'ขยายรายละเอียดอัปเดต',
+  'updater.compactDetails': 'แสดงพรอมป์อัปเดตแบบย่อ',
   'updater.failed': 'อัปเดตไม่สำเร็จ',
   'updater.installerOpenBody': 'ตัวติดตั้งเปิดอยู่ Open Design กำลังออกเพื่อให้คุณอัปเดตให้เสร็จ',
   'updater.installerOpened': 'เปิดตัวติดตั้งแล้ว',
@@ -3626,6 +3628,8 @@ export const th: Dict = {
   'updater.ready': 'อัปเดตพร้อมแล้ว',
   'updater.readyGeneric': 'เวอร์ชันใหม่พร้อมแล้ว Open Design จะปิดและเปิดตัวติดตั้ง',
   'updater.readyVersion': 'Open Design {version} พร้อมแล้ว Open Design จะปิดและเปิดตัวติดตั้ง',
+  'updater.releaseNotesPreview': 'ตัวอย่างบันทึกประจำรุ่น\n\nพรอมป์นี้แสดงข้อความคงที่ในเครื่องระหว่างตรวจสอบ UI ตัวอัปเดตแบบขยาย\n\nการติดตั้งยังใช้การส่งต่อไปยังตัวอัปเดตที่แพ็กไว้ บันทึกประจำรุ่น HTML และ Markdown จากระยะไกลจะถูกข้ามโดยตั้งใจในตอนนี้',
+  'updater.viewFullReleaseNotes': 'ดูบันทึกฉบับเต็ม',
   'updater.upToDate': 'คุณใช้เวอร์ชันล่าสุดอยู่แล้ว',
   'newsletter.label': 'Newsletter (optional)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/tr.ts b/apps/web/src/i18n/locales/tr.ts
index 1be09f0e377..a6612c661cf 100644
--- a/apps/web/src/i18n/locales/tr.ts
+++ b/apps/web/src/i18n/locales/tr.ts
@@ -3546,6 +3546,8 @@ export const tr: Dict = {
   'updater.downloading': 'Güncelleme indiriliyor',
   'updater.downloadingPercent': 'Güncelleme indiriliyor {percent}%',
   'updater.done': 'Tamam',
+  'updater.expandDetails': 'Güncelleme ayrıntılarını genişlet',
+  'updater.compactDetails': 'Kompakt güncelleme istemini göster',
   'updater.failed': 'Güncelleme başarısız',
   'updater.installerOpenBody': 'Yükleyici açık. Güncellemeyi tamamlayabilmeniz için Open Design kapatılıyor.',
   'updater.installerOpened': 'Yükleyici açıldı',
@@ -3564,6 +3566,8 @@ export const tr: Dict = {
   'updater.ready': 'Güncelleme hazır',
   'updater.readyGeneric': 'Yeni bir sürüm hazır. Open Design kapanıp yükleyiciyi açacak.',
   'updater.readyVersion': 'Open Design {version} hazır. Open Design kapanıp yükleyiciyi açacak.',
+  'updater.releaseNotesPreview': 'Sürüm notları önizlemesi\n\nBu istem, genişletilmiş güncelleyici arayüzü doğrulanırken yerel sabit metin gösterir.\n\nKurulum eylemi hâlâ paketlenmiş güncelleyiciye devri kullanıyor. Uzak HTML ve Markdown sürüm notları şimdilik bilerek atlanıyor.',
+  'updater.viewFullReleaseNotes': 'Tüm sürüm notları',
   'updater.upToDate': 'Zaten en son sürümdesiniz.',
   'newsletter.label': 'Bülten (isteğe bağlı)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/uk.ts b/apps/web/src/i18n/locales/uk.ts
index ce04ae57aa6..de6697b0cf2 100644
--- a/apps/web/src/i18n/locales/uk.ts
+++ b/apps/web/src/i18n/locales/uk.ts
@@ -3474,6 +3474,8 @@ export const uk: Dict = {
   'updater.downloading': 'Завантаження оновлення',
   'updater.downloadingPercent': 'Завантаження оновлення {percent}%',
   'updater.done': 'Готово',
+  'updater.expandDetails': 'Розгорнути деталі оновлення',
+  'updater.compactDetails': 'Показати компактне вікно оновлення',
   'updater.failed': 'Оновлення не вдалося',
   'updater.installerOpenBody': 'Інсталятор відкрито. Open Design закривається, щоб ви могли завершити оновлення.',
   'updater.installerOpened': 'Інсталятор відкрито',
@@ -3492,6 +3494,8 @@ export const uk: Dict = {
   'updater.ready': 'Оновлення готове',
   'updater.readyGeneric': 'Нова версія готова. Open Design закриється і відкриє інсталятор.',
   'updater.readyVersion': 'Open Design {version} готовий. Open Design закриється і відкриє інсталятор.',
+  'updater.releaseNotesPreview': 'Попередній перегляд приміток до випуску\n\nЦе вікно показує локальний сталий текст, доки перевіряється розгорнутий інтерфейс оновлення.\n\nДія встановлення й надалі використовує передавання до запакованого оновлювача. Віддалені HTML- і Markdown-примітки до випуску наразі навмисно оминаються.',
+  'updater.viewFullReleaseNotes': 'Повні примітки до випуску',
   'updater.upToDate': 'У вас уже встановлено найновішу версію.',
   'newsletter.label': 'Розсилка (необов’язково)',
   'newsletter.placeholder': 'you@studio.com',
diff --git a/apps/web/src/i18n/locales/zh-CN.ts b/apps/web/src/i18n/locales/zh-CN.ts
index 1ca646ececf..82c3cedae85 100644
--- a/apps/web/src/i18n/locales/zh-CN.ts
+++ b/apps/web/src/i18n/locales/zh-CN.ts
@@ -3826,6 +3826,8 @@ export const zhCN: Dict = {
   "updater.downloading": "正在下载更新",
   "updater.downloadingPercent": "正在下载更新 {percent}%",
   "updater.done": "完成",
+  "updater.expandDetails": "展开更新详情",
+  "updater.compactDetails": "显示紧凑更新弹窗",
   "updater.failed": "更新失败",
   "updater.installerOpenBody":
     "安装器已打开。Open Design 正在退出，以便你完成更新。",
@@ -3849,6 +3851,9 @@ export const zhCN: Dict = {
   "updater.readyGeneric": "新版本已就绪。Open Design 会关闭并打开安装器。",
   "updater.readyVersion":
     "Open Design {version} 已就绪。Open Design 会关闭并打开安装器。",
+  "updater.releaseNotesPreview":
+    "发布说明预览\n\n此弹窗正在渲染本地常量文本，用于验证展开后的更新 UI。\n\n安装操作仍然使用打包版 updater 的交接流程。远程 HTML 和 Markdown 发布说明暂时有意绕过。",
+  "updater.viewFullReleaseNotes": "查看完整发布说明",
   "updater.upToDate": "您已经是最新版本啦",
 
   'designBrowser.copyScreenshot': '复制截图',
diff --git a/apps/web/src/i18n/locales/zh-TW.ts b/apps/web/src/i18n/locales/zh-TW.ts
index 71abd1d0b3e..31b7c4df5b0 100644
--- a/apps/web/src/i18n/locales/zh-TW.ts
+++ b/apps/web/src/i18n/locales/zh-TW.ts
@@ -3832,6 +3832,8 @@ export const zhTW: Dict = {
   "updater.downloading": "正在下載更新",
   "updater.downloadingPercent": "正在下載更新 {percent}%",
   "updater.done": "完成",
+  "updater.expandDetails": "展開更新詳細資訊",
+  "updater.compactDetails": "顯示精簡更新彈窗",
   "updater.failed": "更新失敗",
   "updater.installerOpenBody":
     "安裝器已開啟。Open Design 正在結束，以便你完成更新。",
@@ -3855,6 +3857,9 @@ export const zhTW: Dict = {
   "updater.readyGeneric": "新版本已就緒。Open Design 會關閉並開啟安裝器。",
   "updater.readyVersion":
     "Open Design {version} 已就緒。Open Design 會關閉並開啟安裝器。",
+  "updater.releaseNotesPreview":
+    "發布說明預覽\n\n此彈窗正在渲染本機常數文字，用於驗證展開後的更新 UI。\n\n安裝操作仍然使用打包版 updater 的交接流程。遠端 HTML 和 Markdown 發布說明暫時有意略過。",
+  "updater.viewFullReleaseNotes": "查看完整發布說明",
   "updater.upToDate": "您已經是最新版本啦",
 
   'designBrowser.copyScreenshot': '複製截圖',
diff --git a/apps/web/src/i18n/types.ts b/apps/web/src/i18n/types.ts
index bf38f922ed9..839aa3fc201 100644
--- a/apps/web/src/i18n/types.ts
+++ b/apps/web/src/i18n/types.ts
@@ -944,6 +944,8 @@ export interface Dict {
   'updater.downloading': string;
   'updater.downloadingPercent': string;
   'updater.done': string;
+  'updater.expandDetails': string;
+  'updater.compactDetails': string;
   'updater.failed': string;
   'updater.installerOpenBody': string;
   'updater.installerOpened': string;
@@ -962,6 +964,8 @@ export interface Dict {
   'updater.ready': string;
   'updater.readyGeneric': string;
   'updater.readyVersion': string;
+  'updater.releaseNotesPreview': string;
+  'updater.viewFullReleaseNotes': string;
   'updater.upToDate': string;
 
   // Newsletter email field on the onboarding About-you step.
diff --git a/apps/web/src/lib/updater.ts b/apps/web/src/lib/updater.ts
index a89b416c6c9..c48c4fea098 100644
--- a/apps/web/src/lib/updater.ts
+++ b/apps/web/src/lib/updater.ts
@@ -32,6 +32,11 @@ export type UpdaterReleaseNoteCandidate = {
   url: string;
 };
 
+export type UpdaterReleaseNotesJumpTo = {
+  kind: 'external';
+  url: string;
+};
+
 export type UpdaterActionResult =
   | { ok: true; model: UpdaterModel; status: OpenDesignHostUpdaterStatusSnapshot }
   | OpenDesignHostFailure;
@@ -106,6 +111,17 @@ function metadataFromStatus(status: OpenDesignHostUpdaterStatusSnapshot | null):
   return null;
 }
 
+function readHttpsUrl(value: unknown): string | null {
+  if (typeof value !== 'string') return null;
+  const raw = value.trim();
+  if (raw.length === 0) return null;
+  try {
+    return new URL(raw).protocol === 'https:' ? raw : null;
+  } catch {
+    return null;
+  }
+}
+
 function readReleaseNoteCandidate(
   files: Record<string, unknown>,
   locale: string,
@@ -161,6 +177,17 @@ export function releaseNoteCandidatesFromStatus(
   return candidates;
 }
 
+export function releaseNotesJumpToFromStatus(
+  status: OpenDesignHostUpdaterStatusSnapshot | null,
+): UpdaterReleaseNotesJumpTo | null {
+  const metadata = metadataFromStatus(status);
+  const releaseNotes = isRecord(metadata?.releaseNotes) ? metadata.releaseNotes : null;
+  const jumpTo = isRecord(releaseNotes?.jumpTo) ? releaseNotes.jumpTo : null;
+  const url = readHttpsUrl(jumpTo?.url);
+  if (url == null) return null;
+  return { kind: 'external', url };
+}
+
 export function deriveUpdaterModel(
   status: OpenDesignHostUpdaterStatusSnapshot | null,
   options: { hostAvailable?: boolean } = {},
diff --git a/apps/web/src/styles/workspace/mention-home.css b/apps/web/src/styles/workspace/mention-home.css
index 02eb0bd42a3..e84043439a9 100644
--- a/apps/web/src/styles/workspace/mention-home.css
+++ b/apps/web/src/styles/workspace/mention-home.css
@@ -337,6 +337,24 @@
   -webkit-app-region: no-drag;
 }
 
+.updater-popup.updater-popup--expanded,
+.entry-main__topbar .entry-updater-menu .updater-popup.updater-popup--expanded,
+[dir='rtl'] .entry-updater-menu .updater-popup.updater-popup--expanded,
+[dir='rtl'] .entry-main__topbar .entry-updater-menu .updater-popup.updater-popup--expanded {
+  position: fixed;
+  top: 50%;
+  right: auto;
+  left: 50%;
+  translate: -50% -50%;
+  width: min(760px, calc(100vw - 48px));
+  height: min(620px, calc(100vh - 48px));
+  max-height: calc(100vh - 48px);
+  grid-template-columns: 52px minmax(0, 1fr);
+  grid-template-rows: minmax(0, 1fr) auto;
+  gap: 18px;
+  padding: 24px;
+}
+
 [dir='rtl'] .entry-updater-menu .updater-popup {
   left: auto;
   right: calc(100% + 12px);
@@ -363,8 +381,40 @@
   color: var(--accent);
 }
 
+.updater-popup__tools {
+  position: absolute;
+  top: 10px;
+  right: 10px;
+  z-index: 2;
+  display: inline-flex;
+}
+
+[dir='rtl'] .entry-updater-menu .updater-popup__tools {
+  right: auto;
+  left: 10px;
+}
+
+.updater-popup__icon-button {
+  width: 30px;
+  height: 30px;
+  display: grid;
+  place-items: center;
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  background: color-mix(in oklab, var(--bg-panel) 88%, var(--bg-elevated));
+  color: var(--text-muted);
+  cursor: pointer;
+}
+
+.updater-popup__icon-button:hover {
+  border-color: var(--border-strong);
+  color: var(--text);
+}
+
 .updater-popup__body {
   min-width: 0;
+  min-height: 0;
+  padding-inline-end: 30px;
 }
 
 .updater-popup__body h2 {
@@ -388,6 +438,35 @@
   border: 1px solid var(--border-soft);
   border-radius: 8px;
   background: var(--bg-panel);
+  padding: 12px;
+}
+
+.updater-popup__release-notes p {
+  margin: 0;
+  color: var(--text);
+  font-size: 13px;
+  line-height: 1.55;
+  white-space: pre-line;
+}
+
+.updater-popup__release-notes-jump {
+  width: fit-content;
+  margin-top: 12px;
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  border: 0;
+  background: transparent;
+  color: var(--accent);
+  font: inherit;
+  font-size: 13px;
+  font-weight: 600;
+  cursor: pointer;
+  padding: 0;
+}
+
+.updater-popup__release-notes-jump:hover {
+  color: var(--text);
 }
 
 .updater-popup__release-notes iframe {
@@ -445,10 +524,68 @@
   color: #ffffff;
 }
 
+.updater-popup--expanded .updater-popup__icon {
+  width: 52px;
+  height: 52px;
+}
+
+.updater-popup--expanded .updater-popup__body {
+  display: flex;
+  flex-direction: column;
+  padding-inline-end: 42px;
+}
+
+.updater-popup--expanded .updater-popup__body h2 {
+  font-size: 20px;
+}
+
+.updater-popup--expanded .updater-popup__body > p {
+  max-width: 620px;
+  font-size: 14px;
+}
+
+.updater-popup--expanded .updater-popup__release-notes {
+  flex: 1;
+  min-height: 0;
+  max-height: none;
+  margin-top: 18px;
+  padding: 18px;
+}
+
+.updater-popup--expanded .updater-popup__release-notes p {
+  font-size: 14px;
+  line-height: 1.6;
+}
+
+.updater-popup--expanded .updater-popup__actions {
+  align-items: center;
+}
+
 @media (max-width: 560px) {
   .updater-popup {
     width: calc(100vw - var(--entry-rail-width, 56px) - 18px);
   }
+
+  .updater-popup.updater-popup--expanded,
+  .entry-main__topbar .entry-updater-menu .updater-popup.updater-popup--expanded,
+  [dir='rtl'] .entry-updater-menu .updater-popup.updater-popup--expanded,
+  [dir='rtl'] .entry-main__topbar .entry-updater-menu .updater-popup.updater-popup--expanded {
+    width: calc(100vw - 20px);
+    height: min(620px, calc(100vh - 20px));
+    max-height: calc(100vh - 20px);
+    grid-template-columns: 40px minmax(0, 1fr);
+    gap: 12px;
+    padding: 16px;
+  }
+
+  .updater-popup--expanded .updater-popup__icon {
+    width: 40px;
+    height: 40px;
+  }
+
+  .updater-popup--expanded .updater-popup__body {
+    padding-inline-end: 34px;
+  }
 }
 
 /* Compact rename modal */
diff --git a/apps/web/tests/components/UpdaterPopup.test.tsx b/apps/web/tests/components/UpdaterPopup.test.tsx
index d48f6dd2ded..f85f308a60a 100644
--- a/apps/web/tests/components/UpdaterPopup.test.tsx
+++ b/apps/web/tests/components/UpdaterPopup.test.tsx
@@ -130,6 +130,28 @@ describe('UpdaterPopup', () => {
     expect(await screen.findByRole('dialog', { name: 'Update ready' })).toBeTruthy();
     expect(screen.getByText('Open Design 1.2.3-beta.4 is ready. Open Design will close and open the installer.')).toBeTruthy();
     expect(screen.getByTestId('updater-install-button').textContent).toBe('Install update');
+    expect(screen.getByTestId('updater-popup').className).toContain('updater-popup--expanded');
+  });
+
+  it('can shrink the expanded prompt back to the compact anchored prompt', async () => {
+    restoreHost = installMockOpenDesignHost({
+      host: {
+        updater: {
+          status: vi.fn(async () => downloadedStatus()),
+        },
+      },
+    });
+
+    render(<UpdaterPopup />);
+
+    fireEvent.click(await screen.findByTestId('entry-nav-updater'));
+    expect(await screen.findByTestId('updater-popup')).toBeTruthy();
+    expect(screen.getByTestId('updater-popup').className).toContain('updater-popup--expanded');
+
+    fireEvent.click(screen.getByTestId('updater-popup-size-button'));
+
+    expect(screen.getByTestId('updater-popup').className).toContain('updater-popup--compact');
+    expect(screen.getByTestId('updater-popup-size-button').getAttribute('aria-label')).toBe('Expand update details');
   });
 
   it('uses localized ready prompt copy from the app i18n provider', async () => {
@@ -178,7 +200,8 @@ describe('UpdaterPopup', () => {
     expect(screen.getByText('Open Design 1.2.3-beta.4 已就绪。Open Design 会关闭并自动重启。')).toBeTruthy();
   });
 
-  it('renders fetched release notes through the metadata fallback chain', async () => {
+  it('renders static release notes without fetching metadata URLs', async () => {
+    const openExternal = vi.fn(async () => ({ ok: true as const }));
     const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
       const url = String(input);
       if (url === '/api/version') {
@@ -187,17 +210,14 @@ describe('UpdaterPopup', () => {
           status: 200,
         });
       }
-      if (url.endsWith('/en.html')) {
-        return new Response('', { status: 404 });
-      }
-      return new Response('# 中文更新\n\n- 已支持发布说明。', {
-        headers: { 'content-type': 'text/markdown; charset=utf-8' },
-        status: 200,
-      });
+      return new Response('unexpected fetch', { status: 500 });
     });
     globalThis.fetch = fetchMock as typeof fetch;
     restoreHost = installMockOpenDesignHost({
       host: {
+        shell: {
+          openExternal,
+        },
         updater: {
           status: vi.fn(async () => downloadedStatus({
             metadata: {
@@ -221,6 +241,10 @@ describe('UpdaterPopup', () => {
                     },
                   },
                 },
+                jumpTo: {
+                  kind: 'external',
+                  url: 'https://releases.example.test/stable/versions/1.2.3/details',
+                },
               },
             },
           })),
@@ -229,23 +253,20 @@ describe('UpdaterPopup', () => {
     });
 
     render(
-      <I18nProvider initial="zh-CN">
+      <I18nProvider initial="en">
         <UpdaterPopup />
       </I18nProvider>,
     );
 
     fireEvent.click(await screen.findByTestId('entry-nav-updater'));
 
-    expect(await screen.findByTestId('updater-release-notes')).toBeTruthy();
-    expect(screen.getByText('中文更新')).toBeTruthy();
-    const enHtmlCall = fetchMock.mock.calls.find(([input]) => String(input).endsWith('/en.html'));
-    const zhMarkdownCall = fetchMock.mock.calls.find(([input]) => String(input).endsWith('/zh-CN.md'));
-    expect(enHtmlCall).toEqual(['https://releases.example.test/stable/versions/1.2.3/release-notes/en.html', {
-      headers: { 'Cache-Control': 'no-cache' },
-    }]);
-    expect(zhMarkdownCall).toEqual(['https://releases.example.test/stable/versions/1.2.3/release-notes/zh-CN.md', {
-      headers: { 'Cache-Control': 'no-cache' },
-    }]);
+    const releaseNotes = await screen.findByTestId('updater-release-notes');
+    expect(releaseNotes.textContent).toContain('Release notes preview');
+    expect(releaseNotes.textContent).toContain('local constant text');
+    expect(fetchMock.mock.calls.some(([input]) => String(input).includes('releases.example.test'))).toBe(false);
+
+    fireEvent.click(screen.getByTestId('updater-release-notes-jump'));
+    expect(openExternal).toHaveBeenCalledWith('https://releases.example.test/stable/versions/1.2.3/details');
   });
 
   it('dismisses the confirmation prompt before installation starts', async () => {
diff --git a/apps/web/tests/lib/updater.test.ts b/apps/web/tests/lib/updater.test.ts
index 5a047279632..e1ee6852796 100644
--- a/apps/web/tests/lib/updater.test.ts
+++ b/apps/web/tests/lib/updater.test.ts
@@ -10,6 +10,7 @@ import {
   openUpdaterInstaller,
   quitAfterUpdaterInstallerOpen,
   releaseNoteCandidatesFromStatus,
+  releaseNotesJumpToFromStatus,
   readUpdaterStatus,
 } from '../../src/lib/updater';
 
@@ -187,6 +188,36 @@ describe('web updater model', () => {
     ]);
   });
 
+  it('resolves the release-note jump target from metadata when it is HTTPS', () => {
+    const status = downloadedStatus({
+      metadata: {
+        releaseNotes: {
+          jumpTo: {
+            kind: 'external',
+            url: 'https://releases.example.test/beta/versions/1.2.3-beta.4/details',
+          },
+        },
+      },
+    });
+
+    expect(releaseNotesJumpToFromStatus(status)).toEqual({
+      kind: 'external',
+      url: 'https://releases.example.test/beta/versions/1.2.3-beta.4/details',
+    });
+    expect(
+      releaseNotesJumpToFromStatus(downloadedStatus({
+        metadata: {
+          releaseNotes: {
+            jumpTo: {
+              kind: 'external',
+              url: 'http://releases.example.test/beta/versions/1.2.3-beta.4/details',
+            },
+          },
+        },
+      })),
+    ).toBeNull();
+  });
+
   it('keeps the downloaded installer visible without surfacing newer incoming progress', () => {
     const model = deriveUpdaterModel(
       downloadedStatus({
diff --git a/packages/contracts/src/analytics/events/ui-click.ts b/packages/contracts/src/analytics/events/ui-click.ts
index 0f4bc658292..a048d968ac3 100644
--- a/packages/contracts/src/analytics/events/ui-click.ts
+++ b/packages/contracts/src/analytics/events/ui-click.ts
@@ -232,8 +232,8 @@ export interface StudioOnboardingHintClickProps {
 export interface UpdateIndicatorClickProps {
   page_name: 'home';
   area: 'update_indicator' | 'update_prompt';
-  element: 'ready_indicator' | 'later' | 'install_update';
-  action: 'open_prompt' | 'dismiss' | 'install';
+  element: 'ready_indicator' | 'later' | 'install_update' | 'release_notes';
+  action: 'open_prompt' | 'dismiss' | 'install' | 'open_link';
   app_version_before?: string;
   app_version_after?: string;
 }
@@ -1561,4 +1561,3 @@ export type UiClickProps =
   | SettingsDesignReviewClickProps
   | SettingsExternalMcpClickProps
   | OnboardingClickProps;
-
diff --git a/tools/pack/src/config.ts b/tools/pack/src/config.ts
index 6eb2940cb62..c5babd848fa 100644
--- a/tools/pack/src/config.ts
+++ b/tools/pack/src/config.ts
@@ -126,6 +126,12 @@ export type ToolPackConfig = {
    * app host on its own, which is correct for the official project.
    */
   posthogCliHost?: string;
+  /**
+   * Release workflows set `RELEASE_PUBLISH_SIDE_EFFECTS=false` for dry-runs.
+   * tools-pack must honor that flag for external build-time publishers such as
+   * PostHog sourcemap upload, while still stripping sourcemaps locally.
+   */
+  publishSideEffectsEnabled?: boolean;
   to: ToolPackBuildOutput;
   webOutputMode: ToolPackWebOutputMode;
   workspaceRoot: string;
@@ -279,6 +285,10 @@ function resolveToolPackUpdateMetadataUrl(value: string | undefined): string | u
   return normalized;
 }
 
+function resolveToolPackPublishSideEffectsEnabled(value: string | undefined): boolean {
+  return value !== "false";
+}
+
 function resolveElectronVersion(workspaceRoot: string): string {
   const require = createRequire(join(workspaceRoot, "apps/desktop/package.json"));
   const desktopPackage = require(join(workspaceRoot, "apps/desktop/package.json")) as {
@@ -365,6 +375,7 @@ export function resolveToolPackConfig(
       process.env.POSTHOG_CLI_PROJECT_ID ?? process.env.POSTHOG_PROJECT_ID,
     ),
     posthogCliHost: resolveToolPackPosthogCliHost(process.env.POSTHOG_CLI_HOST),
+    publishSideEffectsEnabled: resolveToolPackPublishSideEffectsEnabled(process.env.RELEASE_PUBLISH_SIDE_EFFECTS),
     to: resolveToolPackBuildOutput(platform, options.to),
     webOutputMode: resolveToolPackWebOutputMode(platform, process.env.OD_WEB_OUTPUT_MODE),
     workspaceRoot: WORKSPACE_ROOT,
diff --git a/tools/pack/src/web-sourcemaps.ts b/tools/pack/src/web-sourcemaps.ts
index bf28b445e62..aa101e797d3 100644
--- a/tools/pack/src/web-sourcemaps.ts
+++ b/tools/pack/src/web-sourcemaps.ts
@@ -17,13 +17,14 @@
 // `processWebSourcemaps` does both:
 //
 //   - With `POSTHOG_CLI_API_KEY` + `POSTHOG_CLI_PROJECT_ID` (CI on
-//     release-{beta,stable,preview}): run `@posthog/cli sourcemap inject`
-//     to bake chunk IDs into the JS/map pair, then `sourcemap upload` to
-//     ship the maps to PostHog. Best-effort — if upload fails (rate limit,
-//     network blip), the strip step below still runs.
+//     release-{beta,stable,preview}) AND release side effects enabled: run
+//     `@posthog/cli sourcemap inject` to bake chunk IDs into the JS/map pair,
+//     then `sourcemap upload` to ship the maps to PostHog. Best-effort — if
+//     upload fails (rate limit, network blip), the strip step below still runs.
 //
 //   - Without those env vars (local `pnpm tools-pack mac build` by a
-//     contributor, fork PR builds): skip both inject and upload, just strip.
+//     contributor, fork PR builds) or when `RELEASE_PUBLISH_SIDE_EFFECTS=false`
+//     (release dry-runs): skip both inject and upload, just strip.
 //
 // Either way, the final step ALWAYS removes every `.map` under the
 // browser chunks directory. Stripping is a hard requirement; only the
@@ -105,6 +106,7 @@ async function deleteMapFiles(dir: string): Promise<number> {
 }
 
 function readUploadEnv(config: ToolPackConfig): SourcemapCliEnv | null {
+  if (config.publishSideEffectsEnabled === false) return null;
   if (config.posthogCliApiKey == null || config.posthogCliApiKey.length === 0) return null;
   if (config.posthogCliProjectId == null || config.posthogCliProjectId.length === 0) return null;
   return {
@@ -215,6 +217,8 @@ export async function processWebSourcemaps(
     } catch (error) {
       log(`upload failed: ${(error as Error).message}; continuing to strip`);
     }
+  } else if (config.publishSideEffectsEnabled === false) {
+    log("RELEASE_PUBLISH_SIDE_EFFECTS=false; skipping PostHog upload");
   } else {
     log("POSTHOG_CLI_API_KEY/POSTHOG_CLI_PROJECT_ID missing; skipping upload");
   }
diff --git a/tools/pack/tests/config.test.ts b/tools/pack/tests/config.test.ts
index ad69bd976bc..17d54239ce9 100644
--- a/tools/pack/tests/config.test.ts
+++ b/tools/pack/tests/config.test.ts
@@ -6,6 +6,7 @@ import { resolveToolPackConfig, WORKSPACE_ROOT } from "../src/config.js";
 const savedTelemetryRelayUrl = process.env.OPEN_DESIGN_TELEMETRY_RELAY_URL;
 const savedPosthogKey = process.env.POSTHOG_KEY;
 const savedPosthogHost = process.env.POSTHOG_HOST;
+const savedReleasePublishSideEffects = process.env.RELEASE_PUBLISH_SIDE_EFFECTS;
 const savedAmrProfile = process.env.OPEN_DESIGN_AMR_PROFILE;
 
 afterEach(() => {
@@ -29,6 +30,11 @@ afterEach(() => {
   } else {
     process.env.OPEN_DESIGN_AMR_PROFILE = savedAmrProfile;
   }
+  if (savedReleasePublishSideEffects == null) {
+    delete process.env.RELEASE_PUBLISH_SIDE_EFFECTS;
+  } else {
+    process.env.RELEASE_PUBLISH_SIDE_EFFECTS = savedReleasePublishSideEffects;
+  }
 });
 
 describe("resolveToolPackConfig AMR profile", () => {
@@ -176,4 +182,16 @@ describe("resolveToolPackConfig PostHog analytics", () => {
     const config = resolveToolPackConfig("mac");
     expect(config.posthogHost).toBe("https://eu.i.posthog.com");
   });
+
+  it("disables external publish side effects when RELEASE_PUBLISH_SIDE_EFFECTS=false", () => {
+    process.env.RELEASE_PUBLISH_SIDE_EFFECTS = "false";
+    const config = resolveToolPackConfig("mac", { namespace: "dry-run-side-effects-test" });
+    expect(config.publishSideEffectsEnabled).toBe(false);
+  });
+
+  it("keeps external publish side effects enabled by default", () => {
+    delete process.env.RELEASE_PUBLISH_SIDE_EFFECTS;
+    const config = resolveToolPackConfig("mac", { namespace: "publish-side-effects-test" });
+    expect(config.publishSideEffectsEnabled).toBe(true);
+  });
 });
diff --git a/tools/pack/tests/release-workflows.test.ts b/tools/pack/tests/release-workflows.test.ts
index faf7df78532..0243407aaf6 100644
--- a/tools/pack/tests/release-workflows.test.ts
+++ b/tools/pack/tests/release-workflows.test.ts
@@ -61,6 +61,10 @@ describe("release workflows", () => {
     const prereleaseWin = sectionBetween(prerelease, "  build_win:", "  build_linux:");
     const stableMetadata = sectionBetween(stable, "  metadata:", "  verify:");
     const stablePublish = sectionBetween(stable, "  publish:", "  cleanup_partial_release_assets:");
+    const stableMac = sectionBetween(stable, "  build_mac:", "  build_mac_intel:");
+    const stableMacX64 = sectionBetween(stable, "  build_mac_intel:", "  build_win:");
+    const stableWin = sectionBetween(stable, "  build_win:", "  build_linux:");
+    const stableLinux = sectionBetween(stable, "  build_linux:", "  publish:");
     const selfHostedMac = sectionBetween(betaSelfHosted, "  build_mac_arm64:", "  build_win_x64:");
     const selfHostedWin = sectionBetween(betaSelfHosted, "  build_win_x64:", "  publish:");
 
@@ -318,6 +322,11 @@ describe("release workflows", () => {
     expect(stable).toContain("if: ${{ needs.metadata.outputs.run_prepublish_jobs == 'true' }}");
     expect(stable).toContain("RELEASE_DRY_RUN_MODE: ${{ needs.metadata.outputs.dry_run_mode }}");
     expect(stable).toContain("RELEASE_PUBLISH_SIDE_EFFECTS: ${{ needs.metadata.outputs.publish_side_effects_enabled }}");
+    for (const stableBuildJob of [stableMac, stableMacX64, stableWin, stableLinux]) {
+      expect(stableBuildJob).toContain(
+        "RELEASE_PUBLISH_SIDE_EFFECTS: ${{ needs.metadata.outputs.publish_side_effects_enabled }}",
+      );
+    }
     expect(stable).toContain("pnpm exec tools-release prepare-github-assets");
     expect(stable).toContain('gh release upload "$VERSION_TAG" "$RUNNER_TEMP/github-release-assets"/*');
     expect(stable).toContain("RELEASE_METADATA_PATH:");
diff --git a/tools/pack/tests/web-sourcemaps.test.ts b/tools/pack/tests/web-sourcemaps.test.ts
index f57b88219e2..56756754865 100644
--- a/tools/pack/tests/web-sourcemaps.test.ts
+++ b/tools/pack/tests/web-sourcemaps.test.ts
@@ -2,7 +2,7 @@ import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 import type { ToolPackConfig } from "../src/config.js";
 import { processWebSourcemaps } from "../src/web-sourcemaps.js";
@@ -46,6 +46,7 @@ beforeEach(async () => {
 });
 
 afterEach(async () => {
+  vi.restoreAllMocks();
   if (tempRoot != null) {
     await rm(tempRoot, { recursive: true, force: true });
   }
@@ -53,7 +54,7 @@ afterEach(async () => {
   restoreEnv("POSTHOG_CLI_PROJECT_ID", SAVED_PROJECT_ID);
 });
 
-function fakeConfig(workspaceRoot: string): ToolPackConfig {
+function fakeConfig(workspaceRoot: string, overrides: Partial<ToolPackConfig> = {}): ToolPackConfig {
   return {
     appVersion: "0.0.0-test",
     containerized: false,
@@ -88,6 +89,7 @@ function fakeConfig(workspaceRoot: string): ToolPackConfig {
     to: "all",
     webOutputMode: "standalone",
     workspaceRoot,
+    ...overrides,
   };
 }
 
@@ -163,4 +165,25 @@ describe("processWebSourcemaps", () => {
     await expect(readFile(join(nestedDir, "x.js.map"), "utf8")).rejects.toThrow();
     await expect(readFile(join(nestedDir, "x.js"), "utf8")).resolves.toContain("/*");
   });
+
+  it("skips PostHog upload when release publish side effects are disabled", async () => {
+    const chunksDir = await setupChunksDir(tempRoot, ["main-app-dry-run.js.map"]);
+    const config = fakeConfig(tempRoot, {
+      posthogCliApiKey: "phx_test",
+      posthogCliProjectId: "420348",
+      publishSideEffectsEnabled: false,
+    });
+    const stderr = vi.spyOn(process.stderr, "write").mockImplementation(() => true);
+
+    await processWebSourcemaps(config);
+
+    expect(stderr.mock.calls.map((call) => String(call[0])).join("")).toContain(
+      "RELEASE_PUBLISH_SIDE_EFFECTS=false; skipping PostHog upload",
+    );
+    await expect(readFile(join(chunksDir, "chunks", "main-app-dry-run.js.map"), "utf8")).rejects.toThrow();
+    await expect(readFile(join(chunksDir, "chunks", "main-app-dry-run.js"), "utf8")).resolves.toContain(
+      "fake bundle",
+    );
+    stderr.mockRestore();
+  });
 });
diff --git a/tools/release/src/metadata/prepare-beta.ts b/tools/release/src/metadata/prepare-beta.ts
index 6996ef86e76..1432cfd00b2 100644
--- a/tools/release/src/metadata/prepare-beta.ts
+++ b/tools/release/src/metadata/prepare-beta.ts
@@ -271,6 +271,7 @@ function setOutput(name: string, value: string): void {
 
 const packagedVersion = await readPackagedVersion();
 const packagedParsed = parseReleaseBaseVersion(packagedVersion) ?? fail(`invalid packaged version: ${packagedVersion}`);
+const forceLatest = process.env.OPEN_DESIGN_RELEASE_FORCE_LATEST === "true";
 
 let latestStable: ParsedStableVersion | null = null;
 const stableMetadataUrl = process.env.OPEN_DESIGN_STABLE_METADATA_URL;
@@ -295,7 +296,13 @@ if (stableMetadataUrl != null && stableMetadataUrl.length > 0) {
 }
 
 if (latestStable != null && compareReleaseBaseVersions(packagedParsed, latestStable.parsed) <= 0) {
-  fail(`packaged base version ${packagedVersion} must be strictly greater than latest stable ${latestStable.value}`);
+  if (forceLatest) {
+    console.log(
+      `[release-beta] force latest: allowing packaged base version ${packagedVersion} to bypass latest stable ${latestStable.value}`,
+    );
+  } else {
+    fail(`packaged base version ${packagedVersion} must be strictly greater than latest stable ${latestStable.value}`);
+  }
 }
 
 const metadataUrl = process.env.OPEN_DESIGN_BETA_METADATA_URL;
@@ -333,7 +340,13 @@ if (latestBeta != null) {
 
   const ordering = compareReleaseBaseVersions(packagedParsed, existingBase);
   if (ordering < 0) {
-    fail(`packaged base version ${packagedVersion} regressed below current beta base version ${beta.baseVersion}`);
+    if (forceLatest) {
+      console.log(
+        `[release-beta] force latest: allowing packaged base version ${packagedVersion} to bypass current beta base version ${beta.baseVersion}`,
+      );
+    } else {
+      fail(`packaged base version ${packagedVersion} regressed below current beta base version ${beta.baseVersion}`);
+    }
   }
 
   if (ordering === 0) {
diff --git a/tools/release/src/metadata/prepare-betas.ts b/tools/release/src/metadata/prepare-betas.ts
index 0931a8782a5..a51f725c807 100644
--- a/tools/release/src/metadata/prepare-betas.ts
+++ b/tools/release/src/metadata/prepare-betas.ts
@@ -267,6 +267,7 @@ function setOutput(name: string, value: string): void {
 
 const packagedVersion = await readPackagedVersion();
 const packagedParsed = parseReleaseBaseVersion(packagedVersion) ?? fail(`invalid packaged version: ${packagedVersion}`);
+const forceLatest = process.env.OPEN_DESIGN_RELEASE_FORCE_LATEST === "true";
 
 let latestStable: ParsedStableVersion | null = null;
 const stableMetadataUrl = process.env.OPEN_DESIGN_STABLE_METADATA_URL;
@@ -291,7 +292,13 @@ if (stableMetadataUrl != null && stableMetadataUrl.length > 0) {
 }
 
 if (latestStable != null && compareReleaseBaseVersions(packagedParsed, latestStable.parsed) <= 0) {
-  fail(`packaged base version ${packagedVersion} must be strictly greater than latest stable ${latestStable.value}`);
+  if (forceLatest) {
+    console.log(
+      `[release-betas] force latest: allowing packaged base version ${packagedVersion} to bypass latest stable ${latestStable.value}`,
+    );
+  } else {
+    fail(`packaged base version ${packagedVersion} must be strictly greater than latest stable ${latestStable.value}`);
+  }
 }
 
 const metadataUrl = process.env.OPEN_DESIGN_BETAS_METADATA_URL;
@@ -329,7 +336,13 @@ if (latestBetas != null) {
 
   const ordering = compareReleaseBaseVersions(packagedParsed, existingBase);
   if (ordering < 0) {
-    fail(`packaged base version ${packagedVersion} regressed below current betas base version ${betas.baseVersion}`);
+    if (forceLatest) {
+      console.log(
+        `[release-betas] force latest: allowing packaged base version ${packagedVersion} to bypass current betas base version ${betas.baseVersion}`,
+      );
+    } else {
+      fail(`packaged base version ${packagedVersion} regressed below current betas base version ${betas.baseVersion}`);
+    }
   }
 
   if (ordering === 0) {
diff --git a/tools/release/src/release-notes.ts b/tools/release/src/release-notes.ts
index 572c9c7810a..e70392155d2 100644
--- a/tools/release/src/release-notes.ts
+++ b/tools/release/src/release-notes.ts
@@ -1,4 +1,4 @@
-import { existsSync, readdirSync, statSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { join } from "node:path";
 
 export type ReleaseNoteFormat = "html" | "markdown";
@@ -17,9 +17,15 @@ export type ReleaseNotePublishedFile = Omit<ReleaseNoteSourceFile, "path"> & {
   url: string;
 };
 
+export type ReleaseNotesJumpTo = {
+  kind: "external";
+  url: string;
+};
+
 export type ReleaseNotesMetadata = {
   defaultLocale: "en";
   files: Record<string, Partial<Record<ReleaseNoteFormat, ReleaseNotePublishedFile>>>;
+  jumpTo?: ReleaseNotesJumpTo;
   requiredMarkdownLocales: string[];
   version: string;
 };
@@ -35,6 +41,25 @@ export function releaseNotesSourceDir(releaseVersion: string): string {
   return join(releaseNotesRoot(), `v${releaseVersion}`);
 }
 
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value != null && !Array.isArray(value);
+}
+
+function assertHttpsUrl(value: unknown, label: string, path: string): string {
+  const message = `release notes ${label} must be an HTTPS URL: ${path}`;
+  if (typeof value !== "string") throw new Error(message);
+  const raw = value.trim();
+  if (raw.length === 0) throw new Error(message);
+  let parsed: URL;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    throw new Error(message);
+  }
+  if (parsed.protocol !== "https:") throw new Error(message);
+  return raw;
+}
+
 function releaseNoteFormat(extension: string): ReleaseNoteFormat | null {
   if (extension === "html") return "html";
   if (extension === "md") return "markdown";
@@ -60,8 +85,11 @@ function parseReleaseNoteFileName(name: string): { extension: "html" | "md"; for
 
 export function discoverReleaseNotes(releaseVersion: string): ReleaseNoteSourceFile[] {
   const sourceDir = releaseNotesSourceDir(releaseVersion);
-  if (!existsSync(sourceDir) || !statSync(sourceDir).isDirectory()) {
-    throw new Error(`stable release notes directory is required: ${sourceDir}`);
+  if (!existsSync(sourceDir)) {
+    return [];
+  }
+  if (!statSync(sourceDir).isDirectory()) {
+    throw new Error(`release notes path must be a directory: ${sourceDir}`);
   }
 
   const files: ReleaseNoteSourceFile[] = [];
@@ -85,6 +113,24 @@ export function discoverReleaseNotes(releaseVersion: string): ReleaseNoteSourceF
   return files;
 }
 
+export function readReleaseNotesJumpTo(releaseVersion: string): ReleaseNotesJumpTo | null {
+  const metaPath = join(releaseNotesSourceDir(releaseVersion), "meta.json");
+  if (!existsSync(metaPath)) return null;
+
+  const parsed = JSON.parse(readFileSync(metaPath, "utf8")) as unknown;
+  if (!isRecord(parsed)) {
+    throw new Error(`release notes meta must be a JSON object: ${metaPath}`);
+  }
+  if (parsed.jumpTo == null) return null;
+  if (!isRecord(parsed.jumpTo)) {
+    throw new Error(`release notes meta "jumpTo" must be a JSON object: ${metaPath}`);
+  }
+  return {
+    kind: "external",
+    url: assertHttpsUrl(parsed.jumpTo.url, "jumpTo.url", metaPath),
+  };
+}
+
 export function assertStableReleaseNotes(releaseVersion: string): ReleaseNoteSourceFile[] {
   const files = discoverReleaseNotes(releaseVersion);
   const names = new Set(files.map((file) => file.name));
@@ -102,6 +148,7 @@ export function assertStableReleaseNotes(releaseVersion: string): ReleaseNoteSou
 export function releaseNotesMetadata(
   releaseVersion: string,
   files: ReleaseNotePublishedFile[],
+  jumpTo: ReleaseNotesJumpTo | null = null,
 ): ReleaseNotesMetadata {
   const byLocale: ReleaseNotesMetadata["files"] = {};
   for (const file of files) {
@@ -111,6 +158,7 @@ export function releaseNotesMetadata(
   return {
     defaultLocale: RELEASE_NOTES_DEFAULT_LOCALE,
     files: byLocale,
+    ...(jumpTo == null ? {} : { jumpTo }),
     requiredMarkdownLocales: [...RELEASE_NOTES_REQUIRED_MARKDOWN_LOCALES],
     version: releaseVersion,
   };
diff --git a/tools/release/src/storage/publish-metadata.ts b/tools/release/src/storage/publish-metadata.ts
index ec8982b6f22..88c929c3ab9 100644
--- a/tools/release/src/storage/publish-metadata.ts
+++ b/tools/release/src/storage/publish-metadata.ts
@@ -20,6 +20,8 @@ import {
 } from "@open-design/release";
 import {
   assertStableReleaseNotes,
+  discoverReleaseNotes,
+  readReleaseNotesJumpTo,
   releaseNotesMetadata,
   type ReleaseNotePublishedFile,
 } from "../release-notes.ts";
@@ -74,6 +76,7 @@ const versionLockKey = optional(
   countedReleaseChannel == null ? "" : versionLockObjectKey(releaseVersion, countedReleaseChannel),
 );
 const latestCasRequired = process.env.RELEASE_LATEST_CAS_REQUIRED === "true";
+const latestForce = process.env.RELEASE_LATEST_FORCE === "true";
 const storage = publishSideEffectsEnabled || versionLockRequired ? storageConfigFromEnv() : null;
 
 if (versionLockRequired) {
@@ -173,7 +176,11 @@ async function uploadLatestMetadataWithCas(path: string, objectKey: string): Pro
         throw new Error(`latest metadata is invalid JSON: ${error instanceof Error ? error.message : String(error)}`);
       }
       if (latestReleaseVersion.length > 0 && compareReleaseVersions(latestReleaseVersion, releaseVersion) > 0) {
-        throw new Error(`refusing to move ${releaseChannel} latest backward from ${latestReleaseVersion} to ${releaseVersion}`);
+        if (latestForce) {
+          console.log(`force latest: moving ${releaseChannel} latest backward from ${latestReleaseVersion} to ${releaseVersion}`);
+        } else {
+          throw new Error(`refusing to move ${releaseChannel} latest backward from ${latestReleaseVersion} to ${releaseVersion}`);
+        }
       }
       if (latest.etag.length === 0) {
         throw new Error("latest metadata GET did not return an ETag for CAS update");
@@ -223,9 +230,17 @@ async function publishLatestPlatformObjects(manifests: Record<string, PlatformMa
   }
 }
 
-async function publishStableReleaseNotes(versionPrefix: string): Promise<ReturnType<typeof releaseNotesMetadata> | null> {
-  if (releaseChannel !== "stable") return null;
-  const files = assertStableReleaseNotes(releaseVersion);
+async function publishReleaseNotes(versionPrefix: string): Promise<ReturnType<typeof releaseNotesMetadata> | null> {
+  const files = releaseChannel === "stable" ? assertStableReleaseNotes(releaseVersion) : discoverReleaseNotes(releaseVersion);
+  const jumpTo = readReleaseNotesJumpTo(releaseVersion);
+  if (files.length === 0) {
+    if (jumpTo != null) {
+      throw new Error(`release notes jumpTo requires release note files under docs/CHANGELOG/v${releaseVersion}`);
+    }
+    console.log(`release notes: none found for ${releaseChannel} ${releaseVersion}`);
+    return null;
+  }
+
   const published: ReleaseNotePublishedFile[] = [];
   for (const file of files) {
     const objectKey = `${versionPrefix}/release-notes/${file.name}`;
@@ -240,7 +255,7 @@ async function publishStableReleaseNotes(versionPrefix: string): Promise<ReturnT
       url: publicUrl(publicOrigin, `${versionPrefix}/release-notes`, file.name),
     });
   }
-  return releaseNotesMetadata(releaseVersion, published);
+  return releaseNotesMetadata(releaseVersion, published, jumpTo);
 }
 
 function enabled(name: string): boolean {
@@ -317,7 +332,7 @@ if (assetVersionSuffix === "auto") {
   assetVersionSuffix = allReadyTargetsSigned ? ".signed" : ".unsigned";
 }
 const versionPrefix = optional("RELEASE_VERSION_PREFIX", `${releaseChannel}/versions/${releaseVersion}${assetVersionSuffix}`);
-const releaseNotes = await publishStableReleaseNotes(versionPrefix);
+const releaseNotes = await publishReleaseNotes(versionPrefix);
 
 const latestMetadataUpdated = releaseState === "complete";
 const metadata = {
diff --git a/tools/release/tests/channel-prepare.test.ts b/tools/release/tests/channel-prepare.test.ts
index e6c20d518ab..ceedf58e0b0 100644
--- a/tools/release/tests/channel-prepare.test.ts
+++ b/tools/release/tests/channel-prepare.test.ts
@@ -171,6 +171,15 @@ function countedMetadata(
   };
 }
 
+function nextPatchVersion(version: string): string {
+  const parts = version.split(".").map((part) => Number(part));
+  if (parts.length !== 3 || parts.some((part) => !Number.isSafeInteger(part) || part < 0)) {
+    throw new Error(`expected x.y.z package version, got ${version}`);
+  }
+  const [major, minor, patch] = parts as [number, number, number];
+  return `${major}.${minor}.${patch + 1}`;
+}
+
 function stablePrereleaseMetadata(publicOrigin: string, baseVersion: string): Record<string, unknown> {
   const releaseVersion = `${baseVersion}-prerelease.2`;
   const versionPrefix = `prerelease/versions/${releaseVersion}`;
@@ -300,6 +309,52 @@ describe("tools-release local channel prepare validation", () => {
     }
   });
 
+  it("can force beta and betas preparation when latest metadata is ahead of the package base version", async () => {
+    const packagedVersion = await readPackagedVersion();
+    const aheadVersion = nextPatchVersion(packagedVersion);
+    const objects: Record<string, unknown> = {
+      "beta/latest/metadata.json": countedMetadata("beta", `${aheadVersion}-beta.3`, 3, aheadVersion),
+      "betas/latest/metadata.json": countedMetadata("betas", `${aheadVersion}-betas.3`, 3, aheadVersion),
+      "stable/latest/metadata.json": {
+        baseVersion: aheadVersion,
+        channel: "stable",
+        releaseVersion: aheadVersion,
+        stableVersion: aheadVersion,
+      },
+    };
+    const server = await startMetadataServer(objects);
+
+    try {
+      const commonEnv = {
+        GITHUB_REF_NAME: "main",
+        GITHUB_REPOSITORY: "nexu-io/open-design",
+        GITHUB_SHA: "0123456789abcdef0123456789abcdef01234567",
+        OPEN_DESIGN_RELEASE_FORCE_LATEST: "true",
+        OPEN_DESIGN_STABLE_METADATA_URL: `${server.origin}/stable/latest/metadata.json`,
+      };
+
+      const beta = await runPrepare("beta", {
+        ...commonEnv,
+        OPEN_DESIGN_BETA_METADATA_URL: `${server.origin}/beta/latest/metadata.json`,
+      });
+      expect(beta.stdout).toContain(`force latest: allowing packaged base version ${packagedVersion} to bypass latest stable ${aheadVersion}`);
+      expect(beta.stdout).toContain(`force latest: allowing packaged base version ${packagedVersion} to bypass current beta base version ${aheadVersion}`);
+      expect(beta.outputs.release_version).toBe(`${packagedVersion}-beta.1`);
+      expect(beta.outputs.release_number).toBe("1");
+
+      const betas = await runPrepare("betas", {
+        ...commonEnv,
+        OPEN_DESIGN_BETAS_METADATA_URL: `${server.origin}/betas/latest/metadata.json`,
+      });
+      expect(betas.stdout).toContain(`force latest: allowing packaged base version ${packagedVersion} to bypass latest stable ${aheadVersion}`);
+      expect(betas.stdout).toContain(`force latest: allowing packaged base version ${packagedVersion} to bypass current betas base version ${aheadVersion}`);
+      expect(betas.outputs.release_version).toBe(`${packagedVersion}-betas.1`);
+      expect(betas.outputs.release_number).toBe("1");
+    } finally {
+      await server.close();
+    }
+  });
+
   it("prepares preview from the packaged version when branch and explicit version are absent", async () => {
     const packagedVersion = await readPackagedVersion();
     const objects: Record<string, unknown> = {
@@ -554,7 +609,7 @@ describe("tools-release local channel prepare validation", () => {
         OPEN_DESIGN_RELEASE_DRY_RUN: "metadata",
         OPEN_DESIGN_RELEASES_PUBLIC_ORIGIN: "https://releases.example.test",
         OPEN_DESIGN_STABLE_PRERELEASE_VERSION: `${packagedVersion}-prerelease.2`,
-      })).rejects.toThrow(/stable release notes directory is required/);
+      })).rejects.toThrow(/stable release notes require en\.md, zh-CN\.md/);
     } finally {
       await rm(ghRoot, { force: true, recursive: true });
       await rm(missingRoot, { force: true, recursive: true });
diff --git a/tools/serve/src/index.ts b/tools/serve/src/index.ts
index c85950ef5c3..28fdf106af8 100644
--- a/tools/serve/src/index.ts
+++ b/tools/serve/src/index.ts
@@ -13,6 +13,7 @@ type CliOptions = {
   port?: string;
   includePayload?: boolean;
   payloadPath?: string;
+  releaseNotesJumpTo?: string;
   releaseNotes?: string;
   version?: string;
 };
@@ -71,6 +72,7 @@ async function start(service: string, options: CliOptions): Promise<void> {
     includePayload: options.includePayload,
     payloadPath: options.payloadPath,
     port: parsePort(options.port),
+    releaseNotesJumpTo: options.releaseNotesJumpTo,
     releaseNotes: parseReleaseNotes(options.releaseNotes),
     version: options.version,
   });
@@ -108,6 +110,7 @@ cli
   .option("--payload-path <path>", "Serve launcher payload bytes from a real archive")
   .option("--platform <platform>", "Updater platform: mac|win", { default: "mac" })
   .option("--port <port>", "Port to bind, 0 for dynamic", { default: "0" })
+  .option("--release-notes-jump-to <url>", "HTTPS URL for release notes deep-link metadata")
   .option("--release-notes <mode>", "Release notes fixture: none|markdown|html|mixed", { default: "none" })
   .option("--version <version>", "Fixture update version", { default: "99.0.0" })
   .action((service: string, options: CliOptions) => {
diff --git a/tools/serve/src/updater-fixture.ts b/tools/serve/src/updater-fixture.ts
index 33c12e801da..f623c0ba318 100644
--- a/tools/serve/src/updater-fixture.ts
+++ b/tools/serve/src/updater-fixture.ts
@@ -25,6 +25,7 @@ export type UpdaterFixtureOptions = {
   payloadBody?: Buffer | string;
   payloadPath?: string;
   port?: number;
+  releaseNotesJumpTo?: string;
   releaseNotes?: "none" | "markdown" | "html" | "mixed";
   version?: string;
 };
@@ -41,6 +42,7 @@ export type UpdaterFixtureInfo = {
   payloadSha256: string | null;
   payloadUrl: string | null;
   platform: "mac" | "win";
+  releaseNotesJumpTo: string | null;
   releaseNotes: Record<string, { html?: string; markdown?: string }>;
   sha256: string;
   version: string;
@@ -251,6 +253,17 @@ function fixtureReleaseNotes(mode: UpdaterFixtureOptions["releaseNotes"], versio
   return notes;
 }
 
+function readFixtureHttpsUrl(value: string | undefined): string | null {
+  if (value == null || value.length === 0) return null;
+  try {
+    const parsed = new URL(value.trim());
+    if (parsed.protocol === "https:") return parsed.href;
+  } catch {
+    // Fall through to the shared error below.
+  }
+  throw new Error("--release-notes-jump-to must be an HTTPS URL");
+}
+
 export async function startUpdaterFixtureServer(options: UpdaterFixtureOptions = {}): Promise<UpdaterFixtureServer> {
   const channel = normalizeChannel(options.channel);
   const host = options.host ?? "127.0.0.1";
@@ -298,6 +311,7 @@ export async function startUpdaterFixtureServer(options: UpdaterFixtureOptions =
     ? createHash("sha256").update(payloadBody).digest("hex")
     : await sha256File(options.payloadPath);
   const releaseNoteFiles = fixtureReleaseNotes(options.releaseNotes, version);
+  const releaseNotesJumpTo = readFixtureHttpsUrl(options.releaseNotesJumpTo);
 
   let info: UpdaterFixtureInfo | null = null;
   const server = createServer((request, response) => {
@@ -381,6 +395,9 @@ export async function startUpdaterFixtureServer(options: UpdaterFixtureOptions =
                   ]),
                 ),
                 requiredMarkdownLocales: ["en", "zh-CN"],
+                ...(releaseNotesJumpTo == null
+                  ? {}
+                  : { jumpTo: { kind: "external", url: releaseNotesJumpTo } }),
                 version,
               },
             }
@@ -441,6 +458,7 @@ export async function startUpdaterFixtureServer(options: UpdaterFixtureOptions =
     payloadSha256: includePayload ? payloadSha256 : null,
     payloadUrl,
     platform,
+    releaseNotesJumpTo,
     releaseNotes: Object.fromEntries(
       ["en", "zh-CN"].map((locale) => [
         locale,
diff --git a/tools/serve/tests/release-metadata-publish.test.ts b/tools/serve/tests/release-metadata-publish.test.ts
index b0c0c58d878..147e037ebd8 100644
--- a/tools/serve/tests/release-metadata-publish.test.ts
+++ b/tools/serve/tests/release-metadata-publish.test.ts
@@ -7,6 +7,8 @@ import { describe, expect, it } from "vitest";
 
 import { startReleaseStorageFixtureServer } from "../src/release-storage-fixture.js";
 
+type ReleaseStorageFixture = Awaited<ReturnType<typeof startReleaseStorageFixtureServer>>;
+
 function runNode(args: string[], options: { cwd: string; env: NodeJS.ProcessEnv }): Promise<void> {
   return new Promise((resolveRun, rejectRun) => {
     const child = spawn(process.execPath, args, options);
@@ -29,6 +31,19 @@ function runNode(args: string[], options: { cwd: string; env: NodeJS.ProcessEnv
   });
 }
 
+async function putFixtureJson(server: ReleaseStorageFixture, objectKey: string, value: unknown): Promise<void> {
+  const response = await fetch(`${server.info.endpointUrl}/${server.info.bucket}/${objectKey}`, {
+    body: JSON.stringify(value),
+    headers: {
+      "content-type": "application/json; charset=utf-8",
+    },
+    method: "PUT",
+  });
+  if (!response.ok) {
+    throw new Error(`fixture PUT ${objectKey} failed with HTTP ${response.status}: ${await response.text()}`);
+  }
+}
+
 describe("shared release metadata publisher", () => {
   it("publishes complete beta, prerelease, preview, and stable metadata through the release storage fixture", async () => {
     const repoRoot = resolve(import.meta.dirname, "../../..");
@@ -50,6 +65,11 @@ describe("shared release metadata publisher", () => {
         await writeFile(join(releaseNotesDir, "en.md"), `# Open Design ${version}\n\nEnglish notes.\n`, "utf8");
         await writeFile(join(releaseNotesDir, "zh-CN.md"), `# Open Design ${version}\n\n中文说明。\n`, "utf8");
         await writeFile(join(releaseNotesDir, "en.html"), `<h1>Open Design ${version}</h1>\n`, "utf8");
+        await writeFile(
+          join(releaseNotesDir, "meta.json"),
+          JSON.stringify({ jumpTo: { url: `https://releases.example.test/${channel}/${version}` } }, null, 2),
+          "utf8",
+        );
         const base = {
           channel,
           enabled: true,
@@ -141,6 +161,7 @@ describe("shared release metadata publisher", () => {
               html?: { contentType?: string; url?: string };
               markdown?: { contentType?: string; url?: string };
             }>;
+            jumpTo?: { kind?: string; url?: string };
           };
           allReadyTargetsSigned?: boolean;
           signed?: boolean;
@@ -158,17 +179,285 @@ describe("shared release metadata publisher", () => {
         expect(metadata.github?.commit).toBe("abc123");
         if (channel === "stable") {
           expect(metadata.stableVersion).toBe("1.2.3");
-          expect(metadata.releaseNotes?.files?.en?.html?.url).toBe("https://releases.example.test/stable/versions/1.2.3/release-notes/en.html");
-          expect(metadata.releaseNotes?.files?.en?.markdown?.contentType).toBe("text/markdown; charset=utf-8");
-          expect(metadata.releaseNotes?.files?.["zh-CN"]?.markdown?.url).toBe("https://releases.example.test/stable/versions/1.2.3/release-notes/zh-CN.md");
-          expect(server.getObject("stable/versions/1.2.3/release-notes/en.md")).not.toBeNull();
-          expect(server.getObject("stable/versions/1.2.3/release-notes/zh-CN.md")).not.toBeNull();
-          expect(server.getObject("stable/versions/1.2.3/release-notes/en.html")).not.toBeNull();
         }
+        expect(metadata.releaseNotes?.files?.en?.html?.url).toBe(`https://releases.example.test/${channel}/versions/${version}/release-notes/en.html`);
+        expect(metadata.releaseNotes?.files?.en?.markdown?.contentType).toBe("text/markdown; charset=utf-8");
+        expect(metadata.releaseNotes?.files?.["zh-CN"]?.markdown?.url).toBe(`https://releases.example.test/${channel}/versions/${version}/release-notes/zh-CN.md`);
+        expect(metadata.releaseNotes?.jumpTo).toEqual({
+          kind: "external",
+          url: `https://releases.example.test/${channel}/${version}`,
+        });
+        expect(server.getObject(`${channel}/versions/${version}/release-notes/en.md`)).not.toBeNull();
+        expect(server.getObject(`${channel}/versions/${version}/release-notes/zh-CN.md`)).not.toBeNull();
+        expect(server.getObject(`${channel}/versions/${version}/release-notes/en.html`)).not.toBeNull();
         expect(server.getObject(`${channel}/latest/metadata.json`)).not.toBeNull();
       }
     } finally {
       await server.close();
     }
   });
+
+  it("requires explicit force before moving counted latest metadata backward", async () => {
+    const repoRoot = resolve(import.meta.dirname, "../../..");
+    const root = await mkdtemp(join(tmpdir(), "od-release-metadata-force-latest-"));
+    const server = await startReleaseStorageFixtureServer();
+    try {
+      const channel = "beta";
+      const version = "2.0.0-beta.1";
+      const previousVersion = "2.1.0-beta.3";
+      const manifestDir = join(root, "manifests");
+      const metadataDir = join(root, "metadata");
+      await mkdir(manifestDir, { recursive: true });
+      await writeFile(
+        join(manifestDir, "mac_arm64.json"),
+        JSON.stringify(
+          {
+            arch: "arm64",
+            artifacts: { dmg: { url: "https://example.test/dmg" }, payload: { url: "https://example.test/mac-payload" } },
+            channel,
+            enabled: true,
+            feed: null,
+            github: { commit: "abc123", runId: 42 },
+            legacyPlatformKey: "mac",
+            platformKey: "mac_arm64",
+            r2: { versionPrefix: `${channel}/versions/${version}` },
+            releaseTarget: "mac_arm64",
+            releaseVersion: version,
+            signed: true,
+            status: "published",
+            version: 1,
+          },
+          null,
+          2,
+        ),
+        "utf8",
+      );
+      await putFixtureJson(server, `${channel}/latest/metadata.json`, {
+        baseVersion: "2.1.0",
+        channel,
+        releaseNumber: 3,
+        releaseVersion: previousVersion,
+      });
+
+      const env = {
+        ...process.env,
+        BASE_VERSION: "2.0.0",
+        ENABLE_LINUX_X64: "false",
+        ENABLE_MAC_ARM64: "true",
+        ENABLE_MAC_X64: "false",
+        ENABLE_WIN_X64: "false",
+        MAC_ARM64_RESULT: "success",
+        RELEASE_ASSET_SUFFIX: "",
+        RELEASE_CHANNEL: channel,
+        RELEASE_COMMIT: "abc123",
+        RELEASE_LATEST_CAS_REQUIRED: "true",
+        RELEASE_MANIFEST_DIR: manifestDir,
+        RELEASE_METADATA_DIR: metadataDir,
+        RELEASE_OUTPUTS_PATH: join(metadataDir, "outputs.json"),
+        RELEASE_PUBLIC_ORIGIN: "https://releases.example.test",
+        RELEASE_RUN_ID: "42",
+        RELEASE_SIGNED: "true",
+        RELEASE_STORAGE_ACCESS_KEY_ID: "ak",
+        RELEASE_STORAGE_BUCKET: server.info.bucket,
+        RELEASE_STORAGE_ENDPOINT: server.info.endpointUrl,
+        RELEASE_STORAGE_REGION: "auto",
+        RELEASE_STORAGE_SECRET_ACCESS_KEY: "sk",
+        RELEASE_VERSION: version,
+        STATE_SOURCE: "local-tools-serve",
+      };
+
+      await expect(
+        runNode(["--experimental-strip-types", "tools/release/src/storage/publish-metadata.ts"], {
+          cwd: repoRoot,
+          env,
+        }),
+      ).rejects.toThrow(`refusing to move ${channel} latest backward from ${previousVersion} to ${version}`);
+
+      await runNode(["--experimental-strip-types", "tools/release/src/storage/publish-metadata.ts"], {
+        cwd: repoRoot,
+        env: {
+          ...env,
+          RELEASE_LATEST_FORCE: "true",
+        },
+      });
+
+      const latest = server.getObject(`${channel}/latest/metadata.json`);
+      expect(latest).not.toBeNull();
+      expect(JSON.parse(latest?.toString("utf8") ?? "{}")).toMatchObject({
+        channel,
+        releaseVersion: version,
+      });
+    } finally {
+      await server.close();
+    }
+  });
+
+  it("treats non-stable release notes as optional while stable remains required", async () => {
+    const repoRoot = resolve(import.meta.dirname, "../../..");
+    const root = await mkdtemp(join(tmpdir(), "od-release-metadata-optional-notes-"));
+    const server = await startReleaseStorageFixtureServer();
+    try {
+      for (const [channel, version] of [
+        ["beta", "2.0.0-beta.1"],
+        ["stable", "2.0.0"],
+      ] as const) {
+        const changelogRoot = join(root, channel, "CHANGELOG");
+        const manifestDir = join(root, channel, "manifests");
+        const metadataDir = join(root, channel, "metadata");
+        await mkdir(manifestDir, { recursive: true });
+        await writeFile(
+          join(manifestDir, "mac_arm64.json"),
+          JSON.stringify(
+            {
+              arch: "arm64",
+              artifacts: { dmg: { url: "https://example.test/dmg" }, payload: { url: "https://example.test/mac-payload" } },
+              channel,
+              enabled: true,
+              feed: null,
+              github: { commit: "abc123", runId: 42 },
+              legacyPlatformKey: "mac",
+              platformKey: "mac_arm64",
+              r2: { versionPrefix: `${channel}/versions/${version}` },
+              releaseTarget: "mac_arm64",
+              releaseVersion: version,
+              signed: true,
+              status: "published",
+              version: 1,
+            },
+            null,
+            2,
+          ),
+          "utf8",
+        );
+
+        const env = {
+          ...process.env,
+          BASE_VERSION: "2.0.0",
+          ENABLE_LINUX_X64: "false",
+          ENABLE_MAC_ARM64: "true",
+          ENABLE_MAC_X64: "false",
+          ENABLE_WIN_X64: "false",
+          MAC_ARM64_RESULT: "success",
+          OPEN_DESIGN_RELEASE_NOTES_ROOT: changelogRoot,
+          RELEASE_ASSET_SUFFIX: "",
+          RELEASE_CHANNEL: channel,
+          RELEASE_COMMIT: "abc123",
+          RELEASE_MANIFEST_DIR: manifestDir,
+          RELEASE_METADATA_DIR: metadataDir,
+          RELEASE_OUTPUTS_PATH: join(metadataDir, "outputs.json"),
+          RELEASE_PUBLIC_ORIGIN: "https://releases.example.test",
+          RELEASE_RUN_ID: "42",
+          RELEASE_SIGNED: "true",
+          RELEASE_STORAGE_ACCESS_KEY_ID: "ak",
+          RELEASE_STORAGE_BUCKET: server.info.bucket,
+          RELEASE_STORAGE_ENDPOINT: server.info.endpointUrl,
+          RELEASE_STORAGE_REGION: "auto",
+          RELEASE_STORAGE_SECRET_ACCESS_KEY: "sk",
+          RELEASE_VERSION: version,
+          STATE_SOURCE: "local-tools-serve",
+        };
+
+        const publish = runNode(["--experimental-strip-types", "tools/release/src/storage/publish-metadata.ts"], {
+          cwd: repoRoot,
+          env,
+        });
+        if (channel === "stable") {
+          await expect(publish).rejects.toThrow("stable release notes require en.md, zh-CN.md");
+          continue;
+        }
+
+        await publish;
+        const metadata = JSON.parse(await readFile(join(metadataDir, "metadata.json"), "utf8")) as {
+          releaseNotes?: unknown;
+          releaseState?: string;
+        };
+        expect(metadata.releaseState).toBe("complete");
+        expect(metadata.releaseNotes).toBeUndefined();
+        expect(server.getObject(`${channel}/versions/${version}/metadata.json`)).not.toBeNull();
+      }
+    } finally {
+      await server.close();
+    }
+  });
+
+  it("fails loudly when release notes jumpTo metadata is not HTTPS", async () => {
+    const repoRoot = resolve(import.meta.dirname, "../../..");
+    const root = await mkdtemp(join(tmpdir(), "od-release-metadata-invalid-jump-to-"));
+    const server = await startReleaseStorageFixtureServer();
+    try {
+      const channel = "beta";
+      const version = "2.1.0-beta.1";
+      const changelogRoot = join(root, "CHANGELOG");
+      const manifestDir = join(root, "manifests");
+      const metadataDir = join(root, "metadata");
+      const releaseNotesDir = join(changelogRoot, `v${version}`);
+      await mkdir(manifestDir, { recursive: true });
+      await mkdir(releaseNotesDir, { recursive: true });
+      await writeFile(join(releaseNotesDir, "en.md"), "# Open Design\n", "utf8");
+      await writeFile(join(releaseNotesDir, "zh-CN.md"), "# Open Design\n", "utf8");
+      await writeFile(
+        join(releaseNotesDir, "meta.json"),
+        JSON.stringify({ jumpTo: { url: "http://example.test/release-notes" } }, null, 2),
+        "utf8",
+      );
+      await writeFile(
+        join(manifestDir, "mac_arm64.json"),
+        JSON.stringify(
+          {
+            arch: "arm64",
+            artifacts: { dmg: { url: "https://example.test/dmg" } },
+            channel,
+            enabled: true,
+            feed: null,
+            github: { commit: "abc123", runId: 42 },
+            legacyPlatformKey: "mac",
+            platformKey: "mac_arm64",
+            r2: { versionPrefix: `${channel}/versions/${version}` },
+            releaseTarget: "mac_arm64",
+            releaseVersion: version,
+            signed: true,
+            status: "published",
+            version: 1,
+          },
+          null,
+          2,
+        ),
+        "utf8",
+      );
+
+      await expect(
+        runNode(["--experimental-strip-types", "tools/release/src/storage/publish-metadata.ts"], {
+          cwd: repoRoot,
+          env: {
+            ...process.env,
+            BASE_VERSION: "2.1.0",
+            ENABLE_LINUX_X64: "false",
+            ENABLE_MAC_ARM64: "true",
+            ENABLE_MAC_X64: "false",
+            ENABLE_WIN_X64: "false",
+            MAC_ARM64_RESULT: "success",
+            OPEN_DESIGN_RELEASE_NOTES_ROOT: changelogRoot,
+            RELEASE_ASSET_SUFFIX: "",
+            RELEASE_CHANNEL: channel,
+            RELEASE_COMMIT: "abc123",
+            RELEASE_MANIFEST_DIR: manifestDir,
+            RELEASE_METADATA_DIR: metadataDir,
+            RELEASE_OUTPUTS_PATH: join(metadataDir, "outputs.json"),
+            RELEASE_PUBLIC_ORIGIN: "https://releases.example.test",
+            RELEASE_RUN_ID: "42",
+            RELEASE_SIGNED: "true",
+            RELEASE_STORAGE_ACCESS_KEY_ID: "ak",
+            RELEASE_STORAGE_BUCKET: server.info.bucket,
+            RELEASE_STORAGE_ENDPOINT: server.info.endpointUrl,
+            RELEASE_STORAGE_REGION: "auto",
+            RELEASE_STORAGE_SECRET_ACCESS_KEY: "sk",
+            RELEASE_VERSION: version,
+            STATE_SOURCE: "local-tools-serve",
+          },
+        }),
+      ).rejects.toThrow("release notes jumpTo.url must be an HTTPS URL");
+    } finally {
+      await server.close();
+    }
+  });
 });
diff --git a/tools/serve/tests/updater-fixture.test.ts b/tools/serve/tests/updater-fixture.test.ts
index 737cc7ad59d..8edf47ab7b3 100644
--- a/tools/serve/tests/updater-fixture.test.ts
+++ b/tools/serve/tests/updater-fixture.test.ts
@@ -74,6 +74,7 @@ describe("updater fixture server", () => {
   it("serves CORS-enabled release-note fixtures through updater metadata", async () => {
     const server = await startUpdaterFixtureServer({
       channel: "stable",
+      releaseNotesJumpTo: "https://releases.example.test/open-design/2.0.0",
       releaseNotes: "mixed",
       version: "2.0.0",
     });
@@ -89,10 +90,16 @@ describe("updater fixture server", () => {
             html?: { url?: string };
             markdown?: { url?: string };
           }>;
+          jumpTo?: { kind?: string; url?: string };
         };
       };
       expect(metadata.releaseNotes?.files?.en?.html?.url).toBe(server.info.releaseNotes.en?.html);
       expect(metadata.releaseNotes?.files?.["zh-CN"]?.markdown?.url).toBe(server.info.releaseNotes["zh-CN"]?.markdown);
+      expect(metadata.releaseNotes?.jumpTo).toEqual({
+        kind: "external",
+        url: "https://releases.example.test/open-design/2.0.0",
+      });
+      expect(server.info.releaseNotesJumpTo).toBe("https://releases.example.test/open-design/2.0.0");
 
       const options = await fetch(server.info.releaseNotes.en?.html ?? "", {
         method: "OPTIONS",

From 380a098c38aae21a80ea590795a2e63b684afba9 Mon Sep 17 00:00:00 2001
From: PerishCode <perishcode@gmail.com>
Date: Thu, 9 Jul 2026 16:21:45 +0800
Subject: [PATCH 4/5] Align changelog with 0.14.1

---
 docs/CHANGELOG/{v0.14.2 => v0.14.1}/en.md    | 2 +-
 docs/CHANGELOG/{v0.14.2 => v0.14.1}/zh-CN.md | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
 rename docs/CHANGELOG/{v0.14.2 => v0.14.1}/en.md (92%)
 rename docs/CHANGELOG/{v0.14.2 => v0.14.1}/zh-CN.md (92%)

diff --git a/docs/CHANGELOG/v0.14.2/en.md b/docs/CHANGELOG/v0.14.1/en.md
similarity index 92%
rename from docs/CHANGELOG/v0.14.2/en.md
rename to docs/CHANGELOG/v0.14.1/en.md
index f410f80964e..9bff779b5aa 100644
--- a/docs/CHANGELOG/v0.14.2/en.md
+++ b/docs/CHANGELOG/v0.14.1/en.md
@@ -1,4 +1,4 @@
-# Open Design 0.14.2
+# Open Design 0.14.1
 
 ## Improved
 
diff --git a/docs/CHANGELOG/v0.14.2/zh-CN.md b/docs/CHANGELOG/v0.14.1/zh-CN.md
similarity index 92%
rename from docs/CHANGELOG/v0.14.2/zh-CN.md
rename to docs/CHANGELOG/v0.14.1/zh-CN.md
index 83474329dc0..95a6ac6fb00 100644
--- a/docs/CHANGELOG/v0.14.2/zh-CN.md
+++ b/docs/CHANGELOG/v0.14.1/zh-CN.md
@@ -1,4 +1,4 @@
-# Open Design 0.14.2
+# Open Design 0.14.1
 
 ## 改进
 

From c6264c92fea28da51e214c3a3fc6c7cec207a73f Mon Sep 17 00:00:00 2001
From: Looper <looper@noreply.github.com>
Date: Thu, 9 Jul 2026 16:57:47 +0800
Subject: [PATCH 5/5] Prefer active updater release-note metadata

Generated-By: looper 0.10.1 (runner=fixer, agent=codex)
---
 apps/web/src/lib/updater.ts        |  2 +-
 apps/web/tests/lib/updater.test.ts | 85 +++++++++++++++++++++++-------
 2 files changed, 66 insertions(+), 21 deletions(-)

diff --git a/apps/web/src/lib/updater.ts b/apps/web/src/lib/updater.ts
index c48c4fea098..e52a60e0754 100644
--- a/apps/web/src/lib/updater.ts
+++ b/apps/web/src/lib/updater.ts
@@ -105,8 +105,8 @@ function isRecord(value: unknown): value is Record<string, unknown> {
 }
 
 function metadataFromStatus(status: OpenDesignHostUpdaterStatusSnapshot | null): Record<string, unknown> | null {
-  if (isRecord(status?.metadata)) return status.metadata;
   if (isRecord(status?.active?.metadata)) return status.active.metadata;
+  if (isRecord(status?.metadata)) return status.metadata;
   if (isRecord(status?.incoming?.metadata)) return status.incoming.metadata;
   return null;
 }
diff --git a/apps/web/tests/lib/updater.test.ts b/apps/web/tests/lib/updater.test.ts
index e1ee6852796..7713b5c40cf 100644
--- a/apps/web/tests/lib/updater.test.ts
+++ b/apps/web/tests/lib/updater.test.ts
@@ -219,34 +219,79 @@ describe('web updater model', () => {
   });
 
   it('keeps the downloaded installer visible without surfacing newer incoming progress', () => {
-    const model = deriveUpdaterModel(
-      downloadedStatus({
-        incoming: {
-          arch: 'arm64',
-          artifact: {
-            name: 'Open Design Beta 1.2.3-beta.5.dmg',
-            platformKey: 'macAppleSilicon',
-            type: 'dmg',
-            url: 'https://fixture.test/Open Design Beta 1.2.3-beta.5.dmg',
+    const status = downloadedStatus({
+      active: {
+        arch: 'arm64',
+        artifact: {
+          name: 'Open Design Beta 1.2.3-beta.4.dmg',
+          platformKey: 'macAppleSilicon',
+          type: 'dmg',
+          url: 'https://fixture.test/Open Design Beta 1.2.3-beta.4.dmg',
+        },
+        checksum: {
+          algorithm: 'sha256',
+          value: 'active-checksum',
+        },
+        channel: 'beta',
+        downloadedAt: '2026-05-19T00:00:00.000Z',
+        key: '1.2.3-beta.4-mac-arm64',
+        metadata: {
+          releaseNotes: {
+            jumpTo: {
+              kind: 'external',
+              url: 'https://releases.example.test/beta/versions/1.2.3-beta.4/details',
+            },
+          },
+        },
+        path: '/tmp/open-design-updater/Open Design Beta.dmg',
+        platformKey: 'macAppleSilicon',
+        version: '1.2.3-beta.4',
+      },
+      incoming: {
+        arch: 'arm64',
+        artifact: {
+          name: 'Open Design Beta 1.2.3-beta.5.dmg',
+          platformKey: 'macAppleSilicon',
+          type: 'dmg',
+          url: 'https://fixture.test/Open Design Beta 1.2.3-beta.5.dmg',
+        },
+        channel: 'beta',
+        key: '1.2.3-beta.5-mac-arm64',
+        metadata: {
+          releaseNotes: {
+            jumpTo: {
+              kind: 'external',
+              url: 'https://releases.example.test/beta/versions/1.2.3-beta.5/details',
+            },
           },
-          channel: 'beta',
-          key: '1.2.3-beta.5-mac-arm64',
-          progress: {
-            receivedBytes: 64,
-            totalBytes: 256,
+        },
+        progress: {
+          receivedBytes: 64,
+          totalBytes: 256,
+        },
+        startedAt: '2026-05-19T00:00:00.000Z',
+        version: '1.2.3-beta.5',
+      },
+      metadata: {
+        releaseNotes: {
+          jumpTo: {
+            kind: 'external',
+            url: 'https://releases.example.test/beta/versions/1.2.3-beta.5/details',
           },
-          startedAt: '2026-05-19T00:00:00.000Z',
-          version: '1.2.3-beta.5',
         },
-        state: 'downloaded',
-      }),
-      { hostAvailable: true },
-    );
+      },
+      state: 'downloaded',
+    });
+    const model = deriveUpdaterModel(status, { hostAvailable: true });
 
     expect(model.busy).toBe(false);
     expect(model.hasDownloadedInstaller).toBe(true);
     expect(model.shouldPrompt).toBe(true);
     expect(model.downloadProgress).toBeNull();
+    expect(releaseNotesJumpToFromStatus(status)).toEqual({
+      kind: 'external',
+      url: 'https://releases.example.test/beta/versions/1.2.3-beta.4/details',
+    });
   });
 
   it('does not keep prompting after the installer has been opened', () => {