fix(release): avoid changelog preflight pipefail

Author: Ralph Küpper

.github/workflows/release-packages.yml

@@ -136,7 +136,7 @@ jobs:
               echo "::error::tag $TAG already exists — the version in Cargo.toml was already released. Land a version bump or use existing_tag to re-publish."
               exit 1
             fi
-            if ! find changelog.d -maxdepth 1 -type f -name '[0-9]*.md' | grep -q .; then
+            if [ -z "$(find changelog.d -maxdepth 1 -type f -name '[0-9]*.md' -print -quit)" ]; then
               echo "::error::no fragments in changelog.d/ — the release notes are cut from them; nothing to release."
               exit 1
             fi

scripts/publish/publish.test.mts

@@ -367,6 +367,8 @@ test('pipeline.mts: OIDC publication and release receipt are pinned to one commi
   assert.match(workflow, /\[ "\$REF_NAME" = "main" \]/)
   assert.match(workflow, /"\$REF" != refs\/heads\/\*/)
   assert.match(workflow, /\[ "\$CANDIDATE_SHA" != "\$SHA" \]/)
+  assert.match(workflow, /find changelog\.d[^\n]+-print -quit/)
+  assert.doesNotMatch(workflow, /find changelog\.d[^\n]+\|\s*grep -q/)
   assert.match(workflow, /needs: \[preflight, build, build-cross, npm-publish\]/)
   assert.match(workflow, /needs\.npm-publish\.result == 'success'/)
 })