Tom Hu 9dee4adabc fix: download CLI to temp dir and retry GPG key import ...

Fixes two regressions in the wrapper script:

1. Dirty git state (#1851, #1804): The binary, SHA256SUM, and
   SHA256SUM.sig files were downloaded into the working directory
   (repo root) and never cleaned up. Now downloads to a mktemp -d
   directory with an EXIT trap that removes it automatically.

2. GPG import failures (#1876): The key import used
   `echo "$(curl ...)" | gpg --import` which strips trailing newlines
   from the PGP key, had no retries, and no error checking. Now pipes
   curl directly to gpg with a 3-attempt retry loop and explicit
   failure reporting.

Made-with: Cursor

2026-02-26 06:41:35 +09:00

..

codecov.sh

fix: download CLI to temp dir and retry GPG key import

2026-02-26 06:41:35 +09:00