From ea81af649b5e5586881fa241c91e059652b9c4f1 Mon Sep 17 00:00:00 2001
From: "helen@cloud" <liujuanjuan1984@gmail.com>
Date: Wed, 20 May 2026 19:28:01 +0800
Subject: [PATCH] fix(ci): scope gh release commands to repository

---
 .github/workflows/publish.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 5bf7498..331bb3e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -269,6 +269,7 @@ jobs:
       - name: Sync GitHub Release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: Intelligent-Internet/CommonGround
           RELEASE_TAG: ${{ needs.resolve.outputs.release_tag }}
         run: |
           set -euo pipefail
@@ -296,18 +297,18 @@ jobs:
           }
 
           ensure_release() {
-            if retry 3 5 gh release view "$RELEASE_TAG" --json url >/dev/null; then
+            if retry 3 5 gh release view "$RELEASE_TAG" --repo "$GH_REPO" --json url >/dev/null; then
               echo "Release ${RELEASE_TAG} already exists."
               return 0
             fi
 
-            retry 3 5 gh release create "$RELEASE_TAG" --verify-tag --generate-notes
+            retry 3 5 gh release create "$RELEASE_TAG" --repo "$GH_REPO" --verify-tag --generate-notes
           }
 
           ensure_release
 
           mapfile -t existing_assets < <(
-            retry 3 5 gh release view "$RELEASE_TAG" --json assets --jq '.assets[].name'
+            retry 3 5 gh release view "$RELEASE_TAG" --repo "$GH_REPO" --json assets --jq '.assets[].name'
           )
 
           for asset in dist/*.tar.gz dist/*.whl; do
@@ -317,5 +318,5 @@ jobs:
               continue
             fi
 
-            retry 3 5 gh release upload "$RELEASE_TAG" "$asset"
+            retry 3 5 gh release upload "$RELEASE_TAG" --repo "$GH_REPO" "$asset"
           done