modelstudioai · DragonnZhang · Jun 8, 2026 · Jun 8, 2026 · Jun 8, 2026 · Jun 8, 2026
diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
@@ -1,12 +1,12 @@
 name: Desktop Release
 
-run-name: Desktop release ${{ inputs.tag }}
+run-name: Desktop release ${{ inputs.version }}
 
 on:
   workflow_dispatch:
     inputs:
-      tag:
-        description: "Release tag to create or update, for example v0.1.0"
+      version:
+        description: "Desktop app version to release, for example 0.0.2 or v0.0.2"
         required: true
         type: string
       release_name:
@@ -42,7 +42,7 @@ permissions:
   contents: read
 
 concurrency:
-  group: desktop-release-${{ inputs.tag }}
+  group: desktop-release-${{ inputs.version }}
   cancel-in-progress: false
 
 env:
@@ -51,10 +51,96 @@ env:
   QWEN_CODE_VERSION: ${{ inputs.qwen_code_version }}
 
 jobs:
+  release_metadata:
+    name: Prepare Release Source
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: write
+    outputs:
+      release_branch: ${{ steps.release-branch.outputs.branch }}
+      release_ref: ${{ steps.release-branch.outputs.ref }}
+      tag: ${{ steps.release-version.outputs.tag }}
+      version: ${{ steps.release-version.outputs.version }}
+
+    steps:
+      - name: Check out source
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: ${{ env.BUN_VERSION }}
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Configure Git user
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Require main for publishing
+        if: ${{ inputs.dry_run == false }}
+        env:
+          SOURCE_REF: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+
+          if [ "$SOURCE_REF" != "main" ]; then
+            echo "::error::Desktop releases with dry_run=false must be run from main. Current ref: $SOURCE_REF"
+            exit 1
+          fi
+
+      - name: Bump desktop version
+        env:
+          INPUT_VERSION: ${{ inputs.version }}
+        run: bun run bump-desktop-version "$INPUT_VERSION"
+
+      - name: Validate release version
+        id: release-version
+        env:
+          INPUT_VERSION: ${{ inputs.version }}
+        run: bun run check-release-version --version "$INPUT_VERSION"
+
+      - name: Create release branch
+        id: release-branch
+        env:
+          IS_DRY_RUN: ${{ inputs.dry_run }}
+          RELEASE_TAG: ${{ steps.release-version.outputs.tag }}
+        run: |
+          set -euo pipefail
+
+          branch="release/desktop-${RELEASE_TAG}"
+          git switch -c "$branch"
+          git add package.json apps/electron/package.json packages/shared/package.json
+
+          if git diff --staged --quiet; then
+            echo "No desktop version changes to commit."
+          else
+            git commit -m "chore(release): desktop ${RELEASE_TAG}"
+          fi
+
+          echo "branch=$branch" >> "$GITHUB_OUTPUT"
+
+          if [ "$IS_DRY_RUN" = "false" ]; then
+            git push --set-upstream origin "$branch"
+            echo "ref=$branch" >> "$GITHUB_OUTPUT"
+          else
+            echo "Dry run enabled. Skipping release branch push."
+            echo "ref=$GITHUB_SHA" >> "$GITHUB_OUTPUT"
+          fi
+
   build:
     name: Build ${{ matrix.name }}
     runs-on: ${{ matrix.os }}
     timeout-minutes: 90
+    needs: release_metadata
+    env:
+      RELEASE_TAG: ${{ needs.release_metadata.outputs.tag }}
+      RELEASE_VERSION: ${{ needs.release_metadata.outputs.version }}
     strategy:
       fail-fast: false
       matrix:
@@ -72,6 +158,8 @@ jobs:
     steps:
       - name: Check out source
         uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.release_metadata.outputs.release_ref }}
 
       - name: Set up Bun
         uses: oven-sh/setup-bun@v2
@@ -87,6 +175,12 @@ jobs:
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
+      - name: Bump desktop version
+        run: bun run bump-desktop-version "$RELEASE_VERSION"
+
+      - name: Confirm release version
+        run: bun run check-release-version --version "$RELEASE_VERSION"
+
       - name: Build desktop installer
         run: ${{ matrix.command }}
         env:
@@ -115,10 +209,15 @@ jobs:
     name: Publish GitHub Release
     runs-on: ubuntu-latest
     timeout-minutes: 20
-    needs: build
+    needs:
+      - build
+      - release_metadata
     if: ${{ inputs.dry_run == false }}
     permissions:
       contents: write
+    env:
+      RELEASE_TAG: ${{ needs.release_metadata.outputs.tag }}
+      RELEASE_VERSION: ${{ needs.release_metadata.outputs.version }}
 
     steps:
       - name: Download installer artifacts
@@ -133,8 +232,7 @@ jobs:
           RELEASE_DRAFT: ${{ inputs.draft }}
           RELEASE_NAME: ${{ inputs.release_name }}
           RELEASE_PRERELEASE: ${{ inputs.prerelease }}
-          RELEASE_TAG: ${{ inputs.tag }}
-          RELEASE_TARGET: ${{ github.sha }}
+          RELEASE_TARGET: ${{ needs.release_metadata.outputs.release_ref }}
           UPLOAD_CLOBBER: ${{ inputs.clobber }}
         run: |
           set -euo pipefail
@@ -177,12 +275,71 @@ jobs:
             gh release create "${create_args[@]}"
           fi
 
+  sync-version:
+    name: Sync Release Version to Main
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    needs:
+      - publish
+      - release_metadata
+    if: ${{ inputs.dry_run == false }}
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - name: Create version sync PR
+        id: version-pr
+        env:
+          GH_TOKEN: ${{ secrets.CI_BOT_PAT || github.token }}
+          RELEASE_BRANCH: ${{ needs.release_metadata.outputs.release_branch }}
+          RELEASE_TAG: ${{ needs.release_metadata.outputs.tag }}
+        run: |
+          set -euo pipefail
+
+          pr_url="$(gh pr list \
+            --repo "$GITHUB_REPOSITORY" \
+            --head "$RELEASE_BRANCH" \
+            --base main \
+            --json url \
+            --jq '.[0].url')"
+
+          if [ -z "$pr_url" ]; then
+            pr_url="$(gh pr create \
+              --repo "$GITHUB_REPOSITORY" \
+              --base main \
+              --head "$RELEASE_BRANCH" \
+              --title "chore(release): desktop ${RELEASE_TAG}" \
+              --body "Automated desktop release PR for ${RELEASE_TAG}. Syncs desktop package versions on main.")"
+          fi
+
+          echo "url=$pr_url" >> "$GITHUB_OUTPUT"
+
+      - name: Enable auto-merge
+        env:
+          GH_TOKEN: ${{ secrets.CI_BOT_PAT || github.token }}
+          PR_URL: ${{ steps.version-pr.outputs.url }}
+          RELEASE_TAG: ${{ needs.release_metadata.outputs.tag }}
+        run: |
+          set -euo pipefail
+
+          gh pr merge "$PR_URL" \
+            --squash \
+            --auto \
+            --delete-branch \
+            --subject "chore(release): desktop ${RELEASE_TAG} [skip ci]"
+
   dry-run-summary:
     name: Dry Run Summary
     runs-on: ubuntu-latest
     timeout-minutes: 10
-    needs: build
+    needs:
+      - build
+      - release_metadata
     if: ${{ inputs.dry_run }}
+    env:
+      RELEASE_TAG: ${{ needs.release_metadata.outputs.tag }}
+      RELEASE_VERSION: ${{ needs.release_metadata.outputs.version }}
 
     steps:
       - name: Download installer artifacts
@@ -208,6 +365,9 @@ jobs:
           {
             echo "## Desktop release dry run"
             echo
+            echo "Version: $RELEASE_VERSION"
+            echo "Release tag: $RELEASE_TAG"
+            echo
             echo "Built ${#assets[@]} asset(s). No GitHub Release was created or updated."
             echo
             echo "| Asset | Size |"

diff --git a/package.json b/package.json
@@ -110,6 +110,8 @@
     "docs:dev": "cd apps/online-docs && npm install && npx mintlify dev",
     "build": "bun run scripts/build.ts",
     "release": "bun run scripts/release.ts",
+    "bump-desktop-version": "bun run scripts/bump-desktop-version.ts",
+    "check-release-version": "bun run scripts/check-release-version.ts",
     "check-version": "bun run scripts/check-version.ts",
     "oss:sync": "bun run scripts/oss-sync.ts",
     "prepare": "husky"

diff --git a/scripts/bump-desktop-version.ts b/scripts/bump-desktop-version.ts
@@ -0,0 +1,115 @@
+import {
+  desktopReleasePackageSources,
+  normalizeReleaseVersion,
+  readPackageVersion,
+  writePackageVersion,
+} from './desktop-release-version.ts';
+
+interface ParsedArgs {
+  dryRun: boolean;
+  version?: string;
+}
+
+interface VersionChange {
+  currentVersion: string;
+  path: string;
+}
+
+function parseArgs(argv: string[]): ParsedArgs {
+  const args: ParsedArgs = { dryRun: false };
+
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    const next = argv[i + 1];
+
+    if (arg === '--dry-run') {
+      args.dryRun = true;
+      continue;
+    }
+
+    if (arg === '--version' || arg === '-v') {
+      if (!next) throw new Error(`${arg} requires a value.`);
+      if (args.version) throw new Error('Only one release version is allowed.');
+      args.version = next;
+      i += 1;
+      continue;
+    }
+
+    if (arg.startsWith('-')) {
+      throw new Error(`Unknown argument: ${arg}`);
+    }
+
+    if (args.version) {
+      throw new Error('Only one release version is allowed.');
+    }
+    args.version = arg;
+  }
+
+  return args;
+}
+
+function printUsage(): void {
+  console.error(
+    [
+      'Usage: bun run bump-desktop-version <version>',
+      '       bun run bump-desktop-version --dry-run <version>',
+      '',
+      'Examples:',
+      '  bun run bump-desktop-version 0.0.2',
+      '  bun run bump-desktop-version v0.0.2',
+    ].join('\n'),
+  );
+}
+
+function main(): void {
+  const args = parseArgs(process.argv.slice(2));
+  if (!args.version) {
+    printUsage();
+    throw new Error('Release version is required.');
+  }
+
+  const { tag, version } = normalizeReleaseVersion(args.version);
+  const changes: VersionChange[] = desktopReleasePackageSources.map(
+    (source) => ({
+      currentVersion: readPackageVersion(source.path),
+      path: source.path,
+    }),
+  );
+  const pendingChanges = changes.filter(
+    (change) => change.currentVersion !== version,
+  );
+
+  if (args.dryRun) {
+    console.log(`Desktop version dry run: ${version} (${tag})`);
+    for (const change of changes) {
+      const suffix =
+        change.currentVersion === version
+          ? 'already set'
+          : `${change.currentVersion} -> ${version}`;
+      console.log(`  - ${change.path}: ${suffix}`);
+    }
+    console.log('No files were changed.');
+    return;
+  }
+
+  for (const change of pendingChanges) {
+    writePackageVersion(change.path, version);
+  }
+
+  if (pendingChanges.length === 0) {
+    console.log(`Desktop version already set to ${version} (${tag})`);
+    return;
+  }
+
+  console.log(`Updated desktop version to ${version} (${tag})`);
+  for (const change of pendingChanges) {
+    console.log(`  - ${change.path}: ${change.currentVersion} -> ${version}`);
+  }
+}
+
+try {
+  main();
+} catch (error) {
+  console.error(error instanceof Error ? error.message : error);
+  process.exit(1);
+}