fix: 修复 CI 脚本的细节问题

- get_version.py: git push/tag 加 check=True，修复风格(返回类型注解 + raise SystemExit)
- prepare_release_assets.py: 删除死代码 last_err，修正步骤注释序号
- installer_interface.py: 路径安全检查改用 is_relative_to()，语义更清晰

Author: ShadowLemoon

src/one_dragon_qt/view/installer_interface.py

@@ -108,7 +108,7 @@ def _copy_by_manifest_then_cleanup(self, src_root: Path, dst_root: Path) -> bool
 
             # 安全：只允许搬运 src_root 下的内容
             try:
-                if src_root.resolve() not in [src_path.resolve(), *src_path.resolve().parents]:
+                if not src_path.resolve().is_relative_to(src_root.resolve()):
                     continue
             except Exception:
                 continue
@@ -167,7 +167,7 @@ def _copy_by_manifest_then_cleanup(self, src_root: Path, dst_root: Path) -> bool
                     break
                 # 只处理 src_root 下的目录
                 try:
-                    if src_root.resolve() not in parent.resolve().parents and parent.resolve() != src_root.resolve():
+                    if not parent.resolve().is_relative_to(src_root.resolve()):
                         break
                 except Exception:
                     # resolve 失败时，退化为字符串前缀判断

tools/ci/get_version.py

@@ -4,7 +4,7 @@
 from datetime import UTC, datetime, timedelta
 
 
-def main():
+def main() -> int:
     github_ref = os.environ.get('GITHUB_REF', '')
     create_release = os.environ.get('CREATE_RELEASE', 'false').lower() == 'true'
     github_output = os.environ.get('GITHUB_OUTPUT')
@@ -72,8 +72,11 @@ def main():
 
     if should_push_tag:
         print(f"Creating and pushing new tag: {tag}")
-        subprocess.run(['git', '-c', 'user.name=GitHub Actions', '-c', 'user.email=actions@github.com', 'tag', tag])
-        subprocess.run(['git', 'push', 'origin', tag])
+        subprocess.run(['git', '-c', 'user.name=GitHub Actions', '-c', 'user.email=actions@github.com', 'tag', tag], check=True)
+        subprocess.run(['git', 'push', 'origin', tag], check=True)
+
+    return 0
+
 
 if __name__ == "__main__":
-    main()
+    raise SystemExit(main())

tools/ci/prepare_release_assets.py

@@ -29,23 +29,18 @@ def _download(url: str, dest: Path, *, token: str | None = None, retries: int =
     if token:
         headers["Authorization"] = f"Bearer {token}"
 
-    last_err: Exception | None = None
     for attempt in range(1, retries + 1):
         try:
             req = urllib.request.Request(url, headers=headers)
             with urllib.request.urlopen(req, timeout=timeout) as resp, dest.open("wb") as f:
                 shutil.copyfileobj(resp, f)
             return
         except Exception as e:
-            last_err = e
             if attempt < retries:
                 time.sleep(2 * attempt)
             else:
                 raise
 
-    if last_err:
-        raise last_err
-
 
 def _fetch_json(url: str, *, token: str | None = None, timeout: int = 60) -> object:
     headers = {
@@ -292,15 +287,15 @@ def expand_zip_into_named_folder(url: str, download_path: Path, dest_root: Path,
     # 清理临时模型目录（避免打包进 Full/Full-Environment）
     shutil.rmtree(temp_dir, ignore_errors=True)
 
-    # 6. Full 包清单 + 打包（在 repo_root 下打包全部内容；zip 输出在 dist_dir 以避免自包含）
+    # 7. Full 包清单 + 打包（在 repo_root 下打包全部内容；zip 输出在 dist_dir 以避免自包含）
     _log("Generate install manifest (Full)")
     _run([sys.executable, "tools/ci/generate_install_manifest.py", "--output", "install_manifest.json"], cwd=repo_root)
 
     full_zip = dist_dir / f"ZenlessZoneZero-OneDragon-{release_version}-Full.zip"
     _log(f"Create Full zip: {full_zip}")
     _zip_dir_contents(repo_root, full_zip, root_prefix=f"ZenlessZoneZero-OneDragon-{release_version}-Full")
 
-    # 7. Full-Environment：把环境包放入 .install 后重新生成清单并打包
+    # 8. Full-Environment：把环境包放入 .install 后重新生成清单并打包
     env_zip = dist_dir / "ZenlessZoneZero-OneDragon-Environment.zip"
     if not env_zip.exists():
         raise SystemExit(f"Missing {env_zip}")
@@ -314,10 +309,10 @@ def expand_zip_into_named_folder(url: str, download_path: Path, dest_root: Path,
     _log(f"Create Full-Environment zip: {full_env_zip}")
     _zip_dir_contents(repo_root, full_env_zip, root_prefix=f"ZenlessZoneZero-OneDragon-{release_version}-Full-Environment")
 
-    # 8. 复制安装器到版本化文件名
+    # 9. 复制安装器到版本化文件名
     shutil.copy2(repo_root / "OneDragon-Installer.exe", repo_root / f"ZenlessZoneZero-OneDragon-{release_version}-Installer.exe")
 
-    # 9. 把 dist_dir 下所有 zip 移到 repo_root，供 release step 上传
+    # 10. 把 dist_dir 下所有 zip 移到 repo_root，供 release step 上传
     for z in dist_dir.glob("*.zip"):
         _log(f"Move zip to repo root: {z.name}")
         shutil.move(str(z), str(repo_root / z.name))