fix(ci): fix vdev release race between matrix jobs

.github/workflows/vdev_publish.yml

@@ -9,8 +9,6 @@ permissions:
 jobs:
   build:
     runs-on: ${{ matrix.os }}
-    permissions:
-      contents: write # Required to upload release assets
     strategy:
       matrix:
         include:
@@ -53,16 +51,38 @@ jobs:
           tar -czf "${OUTDIR}.tgz" "$OUTDIR"
           echo "ASSET=${OUTDIR}.tgz" >> "$GITHUB_ENV"
 
-      - name: Upload asset to release
+      - name: Stage asset for release
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: vdev-${{ matrix.target }}
+          path: ${{ env.ASSET }}
+          if-no-files-found: error
+
+  # Create and publish the release from one job to avoid races.
+  release:
+    runs-on: ubuntu-24.04
+    needs: build
+    permissions:
+      contents: write # Required to create the release and upload assets
+    steps:
+      - name: Download staged assets
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          pattern: vdev-*
+          path: assets
+          merge-multiple: true
+
+      - name: Publish GitHub release
         uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
         with:
-          files: ${{ env.ASSET }}
+          files: assets/*.tgz
+          fail_on_unmatched_files: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   publish:
     runs-on: ubuntu-24.04
-    needs: build
+    needs: release
     env:
       DISABLE_MOLD: true
     steps: