[leoars]

Summary

Prepares v0.1.0-alpha.2, the first release produced by the release.yml workflow (CI build + build provenance attestation). The application source is unchanged since v0.1.0-alpha.1, so the build label stays M1008; only Version/NumericVersion move.

• installer/release.json: Version 0.1.0-alpha.2, NumericVersion 0.1.0.2 (Milestone M1008 unchanged; ManifestSha256 left as the locally frozen alpha.1 payload hash, which the CI build skips with -SkipFrozenManifest).
• Directory.Build.props: Version 0.1.0-alpha.2.
• src/PGMS.Desktop/BuildInfo.cs: unchanged (M1008), so the validate job matches.
• docs/en|pt-BR/release-notes.md: rewritten for alpha.2 — what changed since alpha.1 (CI build, attestation, installer built in the same run from the same payload, single SHA256SUMS.txt, no PowerShell download installer, documentation), downloads table, verification commands, validation and known limits. No schedule promises.
• README.md / README.pt-BR.md: download button/link to alpha.2; SmartScreen section now includes the gh attestation verify command (identical PowerShell blocks in both languages).
• docs/en|pt-BR/getting-started.md: same download/SmartScreen update.
• docs/en|pt-BR/distribution.md (bundled as READ-ME.md/LEIA-ME.md): version header and the closing paragraph now describe CI assets, SHA256SUMS.txt and attestation instead of the alpha.1 PowerShell installer, which this release does not publish.
• docs/en|pt-BR/graphical-installer.md, validation.md, SECURITY*.md: point to alpha.2.

Validation

• Test-PublicDocumentation.ps1: Valid=True, 15 language pairs, 32 documents, 188 local links, CommandsMatch=True.
• git diff --check: clean.
• Build on CI: see the build check on this PR.
• Database/WPF suites were not rerun: src/ is identical to v0.1.0-alpha.1.

After merge (with the maintainer's go-ahead)

1. Create and push the annotated tag v0.1.0-alpha.2 on the merge commit.
2. The workflow creates a draft pre-release only; publication stays manual.
3. Download the draft assets and repeat the local verification done for PR Release workflow on CI (draft pre-release, provenance attestation) and SmartScreen notice #4 (checksums, gh attestation verify, Verify-Package.ps1, Test-PackageArchive.ps1, Test-PackageGuides.ps1, Test-PackageLaunch.ps1, Test-GraphicalInstaller.ps1); report the results here.

v0.1.0-alpha.1 is not modified.

🤖 Generated with Claude Code

[leoars]

v0.1.0-alpha.2 draft: run result and local verification

Tag v0.1.0-alpha.2 (annotated) created on the merge commit 91e6ddb. Release run: https://github.com/leoars/PostgresManagementStudio/actions/runs/41275774466

Job	Result
Validate tag and declared version	success
Build self-contained payload	success
Package ZIP and graphical installer	success (runner smoke: MainWindowObserved: True, ExitCode: 0, Valid: True)
Sign application binaries (SignPath)	skipped (SIGNPATH_ENABLED not set)
Attest build provenance	success
Sign installer (SignPath)	skipped
Create draft pre-release	success

Draft pre-release v0.1.0-alpha.2 (target 91e6ddb), not published: https://github.com/leoars/PostgresManagementStudio/releases/tag/v0.1.0-alpha.2 (visible to maintainers while draft). Assets: PGMS-0.1.0-alpha.2-win-x64.zip (81,151,472 bytes), PGMS-0.1.0-alpha.2-Setup-x64.exe (58,270,092 bytes), package-manifest.json, SHA256SUMS.txt, RELEASE-NOTES.md, RELEASE-NOTES.pt-BR.md. v0.1.0-alpha.1 is unchanged (9 assets, published).

Local verification of the assets downloaded from the draft (Windows 11, PowerShell 7):

• SHA256SUMS.txt matches all five downloaded files. ZIP 9ede11b1…8ec3, installer 864a46da…8c20.
• gh attestation verify succeeded for the ZIP and for the installer (repository leoars/PostgresManagementStudio).
• PGMS.dll ProductVersion inside the ZIP: 0.1.0-alpha.2.
• Verify-Package.ps1: M1008 SelfContained 521 files Valid=True.
• Test-PackageArchive.ps1: extraction matches the manifest (521 files, Valid=True).
• Test-PackageGuides.ps1: Valid=True; READ-ME.md and LEIA-ME.md equal the alpha.2 sources.
• Test-PackageLaunch.ps1: MainWindowObserved=True, bundled coreclr.dll, isolated state, ExitCode=0, Valid=True.
• Test-GraphicalInstaller.ps1: Valid=True, 17 current-user checks passed (refuses unmanaged/junction targets and locked executable, install, native uninstaller registration, desktop shortcut, installed app opens with bundled runtime, Portuguese repair preserving payload, native uninstall preserving user data). All-users (elevated) install not executed.

Publication of the draft remains the maintainer's decision.