ci: build releases only on semver tags and run PR checks for release lines

[jeanfbrito]

Part of the branching-model migration (dev = development branch, master = releases only, release/X.Y.x = patch lines).

What changed

• build-release.yml no longer triggers on branch pushes (master/dev). Release builds now run only on semver tag pushes (X.Y.Z and X.Y.Z-*). This removes the rolling Development/Snapshot draft builds and makes non-semver tags (archive tags, typos) build-inert.
• validate-pr.yml and pull-request-build.yml now also run for PRs targeting release/** branches — previously patch-release PRs would get no CI at all.
• powershell-lint.yml push trigger extended with release/** for consistency.

Why

Under the new model, alphas are tagged on dev, stables on master (via dev→master release merges), and patches on release/X.Y.x lines. The tag-triggered release path in desktop-release-action is already branch-agnostic, so no action changes are needed — its per-push dev/snapshot code paths simply become unreachable (left in place deliberately to avoid rebuilding the committed dist/ bundle).

Validated with actionlint (only pre-existing, unrelated warnings reported).

Summary by CodeRabbit

• Chores
  • Release automation now runs only for semantic version tags, including prereleases.
  • Code quality checks and pull request validation now support release branches.
  • Pull request builds now run when targeting release branches.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 7ee27122-a171-4216-9640-2b8d582ebe55

📥 Commits

Reviewing files that changed from the base of the PR and between 5ec3255 and 1e4cbd0.

📒 Files selected for processing (4)

• .github/workflows/build-release.yml
• .github/workflows/powershell-lint.yml
• .github/workflows/pull-request-build.yml
• .github/workflows/validate-pr.yml

📜 Recent review details

⏰ Context from checks skipped due to timeout. (2)

• GitHub Check: check (ubuntu-latest)
• GitHub Check: check (windows-latest)

🧰 Additional context used

🧠 Learnings (2)

📓 Common learnings

Learnt from: Ram-sah19
Repo: RocketChat/Rocket.Chat.Electron PR: 3254
File: .github/workflows/build-release.yml:80-94
Timestamp: 2026-03-11T06:38:40.426Z
Learning: In the RocketChat/Rocket.Chat.Electron repository, the issues flagged in `.github/workflows/build-release.yml` (e.g., `node12` runtime in the release action and missing `snapcraft_token` input), i18n files, and `electron-builder.json` are pre-existing in the `develop` branch and are pulled in during merge conflict resolution. Do not flag these as new issues introduced by PRs that only modify `src/injected.ts` and `src/ui/main/rootWindow.ts`.

📚 Learning: 2026-03-11T06:38:40.426Z

Learnt from: Ram-sah19
Repo: RocketChat/Rocket.Chat.Electron PR: 3254
File: .github/workflows/build-release.yml:80-94
Timestamp: 2026-03-11T06:38:40.426Z
Learning: In the RocketChat/Rocket.Chat.Electron repository, the issues flagged in `.github/workflows/build-release.yml` (e.g., `node12` runtime in the release action and missing `snapcraft_token` input), i18n files, and `electron-builder.json` are pre-existing in the `develop` branch and are pulled in during merge conflict resolution. Do not flag these as new issues introduced by PRs that only modify `src/injected.ts` and `src/ui/main/rootWindow.ts`.

Applied to files:

• .github/workflows/validate-pr.yml
• .github/workflows/build-release.yml
• .github/workflows/pull-request-build.yml

🔇 Additional comments (4)

.github/workflows/build-release.yml (1)

7-8: LGTM!

.github/workflows/powershell-lint.yml (1)

16-16: LGTM!

.github/workflows/pull-request-build.yml (1)

10-10: LGTM!

.github/workflows/validate-pr.yml (1)

8-8: LGTM!

---

Walkthrough

The GitHub Actions workflows now trigger release builds only for semantic version tags. PowerShell linting and pull request validation also run for branches matching release/**.

Changes

Workflow trigger updates

Layer / File(s)	Summary
Semantic release tag trigger .github/workflows/build-release.yml	The release workflow triggers on X.Y.Z and X.Y.Z-* tags instead of selected branches and all tags.
Release branch workflow triggers .github/workflows/powershell-lint.yml, .github/workflows/pull-request-build.yml, .github/workflows/validate-pr.yml	The workflows now include release/** in their push or pull request branch triggers.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Mergeability Score: ⚪ Minimal · up to 1e4cb

This PR adjusts release and pull-request workflow triggers without any identified merge-blocking risk; it is merge-ready after normal checks and review.

Suggested labels: type: chore

Suggested reviewers: yasnagat

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the release tag and release-branch CI workflow changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}