ci(release): restore release and local lint commit path

Author: xiaojiou176

.github/workflows/release-candidate.yml

@@ -23,6 +23,7 @@ jobs:
     outputs:
       image_ref: ${{ steps.build.outputs.image_ref }}
     steps:
+      - uses: actions/checkout@64ffef1ea610c4052efefeb955034987fb104bc4 # v4
       - uses: ./.github/actions/repo-checkout
       - name: Login to GHCR
         env:
@@ -51,6 +52,7 @@ jobs:
     needs: build_ci_image
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@64ffef1ea610c4052efefeb955034987fb104bc4 # v4
       - uses: ./.github/actions/repo-checkout
       - name: Docs gate
         env:
@@ -61,6 +63,7 @@ jobs:
     needs: build_ci_image
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@64ffef1ea610c4052efefeb955034987fb104bc4 # v4
       - uses: ./.github/actions/repo-checkout
       - name: Root typecheck gate
         env:
@@ -71,6 +74,7 @@ jobs:
     needs: build_ci_image
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@64ffef1ea610c4052efefeb955034987fb104bc4 # v4
       - uses: ./.github/actions/repo-checkout
       - name: Release security scan
         env:
@@ -90,6 +94,7 @@ jobs:
       attestations: write
       artifact-metadata: write
     steps:
+      - uses: actions/checkout@64ffef1ea610c4052efefeb955034987fb104bc4 # v4
       - uses: ./.github/actions/repo-checkout
       - name: Release candidate gate (containerized)
         env:

scripts/ci/lint-all.sh

@@ -82,14 +82,31 @@ run_backend_lint() {
 install_workspace_deps_serialized() {
   local lock_root=".runtime-cache/locks"
   local lock_dir="${lock_root}/lint-all-workspace-install.lock.d"
+  local lock_pid_file="${lock_dir}/pid"
   mkdir -p "$lock_root"
 
   while ! mkdir "$lock_dir" 2>/dev/null; do
+    if [[ -f "$lock_pid_file" ]]; then
+      local holder_pid=""
+      holder_pid="$(cat "$lock_pid_file" 2>/dev/null || true)"
+      if [[ -n "$holder_pid" ]] && ! kill -0 "$holder_pid" >/dev/null 2>&1; then
+        rm -f "$lock_pid_file" 2>/dev/null || true
+        rmdir "$lock_dir" 2>/dev/null || true
+        continue
+      fi
+    elif [[ -d "$lock_dir" ]]; then
+      rmdir "$lock_dir" 2>/dev/null || true
+      if [[ ! -d "$lock_dir" ]]; then
+        continue
+      fi
+    fi
     sleep 1
   done
+  printf '%s\n' "$$" >"$lock_pid_file"
 
   echo "[lint-all] installing workspace deps under lock..."
   CI=true pnpm install --frozen-lockfile || CI=true pnpm install --no-frozen-lockfile
+  rm -f "$lock_pid_file" 2>/dev/null || true
   rmdir "$lock_dir" 2>/dev/null || true
 }
 

scripts/ci/pre-commit-required-gates.sh

@@ -155,7 +155,7 @@ run_gate_with_container_toggle() {
 
 run_lint_gate_with_container_fallback() {
   local log_file
-  log_file="$(mktemp "${TMPDIR:-/tmp}/prooftrail-precommit-lint.XXXXXX.log")"
+  log_file="$(mktemp "${TMPDIR:-/tmp}/prooftrail-precommit-lint.XXXXXX")"
   trap 'rm -f "$log_file"' RETURN
 
   echo "[pre-commit-required] lint-all-container"

scripts/ci/run-in-container.sh

@@ -337,11 +337,11 @@ run_task_in_container() {
     chmod u+rwx "$artifact_dir" 2>/dev/null || true
   fi
   bootstrap_cmd="$(cat <<EOF
-export PATH="\$HOME/.local/bin:\$PATH"; corepack enable >/dev/null 2>&1 || true; corepack prepare pnpm@10.22.0 --activate >/dev/null 2>&1 || true; mkdir -p "\$HOME/.local/bin" "\$HOME/.local/share/uv"; cat > "\$HOME/.local/bin/pnpm" <<'EOF_PNPM'
+export PATH="\$HOME/.local/bin:\$PATH"; mkdir -p "\$HOME/.local/bin" "\$HOME/.local/share/uv"; npm install --prefix "\$HOME/.local" -g pnpm@10.22.0 >/dev/null 2>&1 || { corepack enable >/dev/null 2>&1 || true; corepack prepare pnpm@10.22.0 --activate >/dev/null 2>&1 || true; cat > "\$HOME/.local/bin/pnpm" <<'EOF_PNPM'
 #!/usr/bin/env bash
 exec corepack pnpm "\$@"
 EOF_PNPM
-chmod +x "\$HOME/.local/bin/pnpm"; if ! command -v uv >/dev/null 2>&1; then curl -LsSf https://astral.sh/uv/install.sh | sh >/dev/null 2>&1 || true; fi; mkdir -p "${WORKDIR}/.runtime-cache/artifacts/ci"
+chmod +x "\$HOME/.local/bin/pnpm"; }; if ! command -v uv >/dev/null 2>&1; then curl -LsSf https://astral.sh/uv/install.sh | sh >/dev/null 2>&1 || true; fi; mkdir -p "${WORKDIR}/.runtime-cache/artifacts/ci"
 EOF
 )"
   local -a env_args=(