ci: gate the release build in the PR, not at the tag

[skyoo2003]

Pull Request

Description

Follow-up to #247. That PR fixed the broken .goreleaser.yaml line; this one closes the hole that let it reach a tag unnoticed.

The v1.6.0 tag build failed on a config every CI gate had passed. Two separate holes were needed for that:

1. .goreleaser.yaml was not in the path filter. A PR touching only that file ran no CI at all — which is exactly what fix: build the acor package, not main.go alone, in the release #247 did, merging on a green labeler and nothing else.
2. No CI step reads that file. So even with the filter, nothing would have compiled it. make build builds ./cmd/acor; GoReleaser builds whatever .goreleaser.yaml names. For v1.6.0 those were different things, which is why a green main proved nothing about the tag.

Adding only the path entry would have been theater: CI would have run, make build would have passed, and the file-vs-package bug would still merge. Both halves are needed, so both are here.

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactoring (no functional changes)
• Test update

CI-only change — none of the above.

What the new step does

- name: Verify the release build
  if: matrix.os == 'ubuntu-latest' && matrix.go-version == '1.26'
  uses: goreleaser/goreleaser-action@f06c13b...  # v7, same pin as release.yaml
  with:
    args: build --snapshot --clean --single-target

build, not release: publishes nothing and needs no tokens, so it is safe on a fork PR. --single-target keeps it to the host platform — enough to fail a config that cannot compile, without paying for the nine-target matrix on every PR. Pinned to one matrix leg, matching tidy-check, license-check, and api-check above it.

Verification

Reintroduced the exact bug locally and ran the step's command:

$ sed -i '' 's|main: ./cmd/acor|main: cmd/acor/main.go|' .goreleaser.yaml
$ goreleaser build --snapshot --clean --single-target
    │ build failed: exit status 1: # command-line-arguments
    │ cmd/acor/main.go:224:10: undefined: dispatchDictionary

That is the tag build's own error, produced in a PR-time check. Restored the file and reconfirmed the build passes; git status shows this PR touches ci.yaml only.

Checklist

• Tests pass (make test) — no Go files changed; pre-commit skipped the Go hooks for that reason
• Vet/make vet — same
• Linting passes (make lint) — same
• Build succeeds (make build) — same
• Documentation updated if needed — N/A
• Changelog fragment added (changie new) — deliberately skipped: CI-only, per the rule stated on this template
• Commit messages follow guidelines

Additional Notes

Unlike #247, this PR will run full CI, since .github/workflows/*.yaml was already in the filter — so the new step gets exercised on its own PR.

---

By submitting this PR, I agree that my contributions will be licensed under the Apache License 2.0.