ci(release): use body_path file to deliver release notes reliably

Previous attempt fed the tag annotation into softprops/action-gh-release
via a multi-line job output rendered through `body: |`. That dropped
the entire 'What's new' section in the published release — GitHub Actions
normalisation of multi-line outputs combined with the YAML template
interpolation collapses the whole block when the substituted value spans
many lines.

Fix: generate the full release-body markdown to a file (build/release-body.md)
using a here-doc with shell variable expansion, and hand it to the action
via body_path. The action then reads the file verbatim, bypassing every
YAML/Actions string-escape pitfall. `append_body: true` keeps GitHub's
auto-generated 'Full Changelog' link tacked on at the end.

Author: Albert

.github/workflows/release.yml

@@ -129,80 +129,77 @@ jobs:
           path: ${{ env.DMG_PATH }}
           if-no-files-found: error
 
-      - name: Extract tag annotation as "What's new" section
-        id: tagnotes
+      - name: Build release body file
         if: startsWith(github.ref, 'refs/tags/')
         run: |
-          # Pull the contents of the annotated tag message (subject + body)
-          # without the trailing PGP signature, if any.
-          MSG=$(git for-each-ref "refs/tags/${{ github.ref_name }}" \
+          # Extract the annotated-tag message (subject + body), stripping any
+          # PGP signature block. Writing to a file (rather than a multi-line
+          # job output) avoids the YAML/templating escape pitfalls that
+          # silently drop the section when fed via `body:` in softprops/action.
+          TAGMSG=$(git for-each-ref "refs/tags/${{ github.ref_name }}" \
             --format='%(contents:subject)%0a%0a%(contents:body)' \
             | /usr/bin/sed -e '/^-----BEGIN PGP SIGNATURE-----$/,$d')
-          # Fallback if the tag is lightweight (no annotation).
-          if [[ -z "$(printf '%s' "$MSG" | tr -d '[:space:]')" ]]; then
-            MSG="Tag ${{ github.ref_name }} — see commit history for details."
+          if [[ -z "$(printf '%s' "$TAGMSG" | tr -d '[:space:]')" ]]; then
+            TAGMSG="Tag ${{ github.ref_name }} — see commit history for details."
           fi
-          {
-            echo "notes<<NOTES_EOF"
-            echo "$MSG"
-            echo "NOTES_EOF"
-          } >> "$GITHUB_OUTPUT"
-          # Echo for debugging in CI logs
-          printf '%s\n' "----- release notes preview -----"
-          printf '%s\n' "$MSG"
-          printf '%s\n' "---------------------------------"
+          cat > build/release-body.md <<MARKDOWN
+          ## What's new in ${{ github.ref_name }}
 
-      - name: Create GitHub Release
-        if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v2
-        with:
-          files: ${{ env.DMG_PATH }}
-          generate_release_notes: true
-          fail_on_unmatched_files: true
-          body: |
-            ## What's new in ${{ github.ref_name }}
-
-            ${{ steps.tagnotes.outputs.notes }}
+          $TAGMSG
 
-            ---
+          ---
 
+          ## ⚠️ First Launch — Read This First
 
-            ## ⚠️ First Launch — Read This First
+          This release is **ad-hoc signed** (not notarized by Apple, because
+          notarization requires a paid Developer ID). On first launch macOS
+          Gatekeeper will likely refuse to open the app with one of:
 
-            This release is **ad-hoc signed** (not notarized by Apple, because
-            notarization requires a paid Developer ID). On first launch macOS
-            Gatekeeper will likely refuse to open the app with one of:
+          - **"FreeDisplay" is damaged and can't be opened. You should move it to the Trash.**
+          - **"FreeDisplay" can't be opened because Apple cannot check it for malicious software.**
 
-            - **"FreeDisplay" is damaged and can't be opened. You should move it to the Trash.**
-            - **"FreeDisplay" can't be opened because Apple cannot check it for malicious software.**
+          **Neither message is real damage** — both are Gatekeeper warnings
+          against unsigned/un-notarized apps. Pick one of the two fixes:
 
-            **Neither message is real damage** — both are Gatekeeper warnings
-            against unsigned/un-notarized apps. Pick one of the two fixes:
+          **Option A (recommended, one terminal command):**
+          \`\`\`bash
+          sudo xattr -rd com.apple.quarantine /Applications/FreeDisplay.app
+          \`\`\`
+          Then double-click FreeDisplay to launch.
 
-            **Option A (recommended, one terminal command):**
-            ```bash
-            sudo xattr -rd com.apple.quarantine /Applications/FreeDisplay.app
-            ```
-            Then double-click FreeDisplay to launch.
+          **Option B (GUI):**
+          System Settings → Privacy & Security → scroll down to the
+          "FreeDisplay was blocked…" message → click **Open Anyway**.
 
-            **Option B (GUI):**
-            System Settings → Privacy & Security → scroll down to the
-            "FreeDisplay was blocked…" message → click **Open Anyway**.
+          After this one-time approval the app launches normally forever.
 
-            After this one-time approval the app launches normally forever.
+          ---
 
-            ---
+          ## Installation
 
-            ## Installation
+          1. Download \`FreeDisplay-${{ steps.ver.outputs.ref }}.dmg\` below
+          2. Open the DMG, drag **FreeDisplay.app** into **Applications**
+          3. Apply one of the fixes above
+          4. Click the display icon in your menu bar to use FreeDisplay
 
-            1. Download `FreeDisplay-${{ steps.ver.outputs.ref }}.dmg` below
-            2. Open the DMG, drag **FreeDisplay.app** into **Applications**
-            3. Apply one of the fixes above
-            4. Click the display icon in your menu bar to use FreeDisplay
+          ## Documentation
 
-            ## Documentation
+          - [English README](https://github.com/Akuwatoga/FreeDisplay/blob/main/README.md)
+          - [简体中文 README](https://github.com/Akuwatoga/FreeDisplay/blob/main/README.zh-CN.md)
+          MARKDOWN
 
-            - [English README](https://github.com/Akuwatoga/FreeDisplay/blob/main/README.md)
-            - [简体中文 README](https://github.com/Akuwatoga/FreeDisplay/blob/main/README.zh-CN.md)
+          echo "----- release body preview -----"
+          /usr/bin/cat build/release-body.md
+          echo "----- end preview -----"
 
-            ---
+      - name: Create GitHub Release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v2
+        with:
+          files: ${{ env.DMG_PATH }}
+          body_path: build/release-body.md
+          # We provide the full body via body_path; let GitHub still append
+          # the auto-generated "Full Changelog" link below it.
+          generate_release_notes: true
+          append_body: true
+          fail_on_unmatched_files: true