ci: improve gh acions jobs stability

Author: seratch

.github/workflows/release-pr-update.yml

@@ -63,13 +63,22 @@ jobs:
           git fetch origin main "$RELEASE_BRANCH"
           git checkout -B "$RELEASE_BRANCH" "origin/$RELEASE_BRANCH"
           git rebase origin/main
+      - name: Prepare Codex output
+        if: steps.find.outputs.found == 'true'
+        id: codex-output
+        run: |
+          set -euo pipefail
+          output_dir=".tmp/codex/outputs"
+          output_file="${output_dir}/release-review.md"
+          mkdir -p "$output_dir"
+          echo "output_file=${output_file}" >> "$GITHUB_OUTPUT"
       - name: Run Codex release review
         if: steps.find.outputs.found == 'true'
         uses: openai/codex-action@v1
         with:
           openai-api-key: ${{ secrets.PROD_OPENAI_API_KEY }}
           prompt-file: .github/codex/prompts/release-review.md
-          output-file: release-review.md
+          output-file: ${{ steps.codex-output.outputs.output_file }}
           safety-strategy: drop-sudo
           sandbox: read-only
       - name: Update PR body and push
@@ -78,10 +87,11 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PR_NUMBER: ${{ steps.find.outputs.number }}
           RELEASE_BRANCH: ${{ steps.find.outputs.branch }}
+          RELEASE_REVIEW_PATH: ${{ steps.codex-output.outputs.output_file }}
         run: |
           set -euo pipefail
           git push --force-with-lease origin "$RELEASE_BRANCH"
-          gh pr edit "$PR_NUMBER" --body-file release-review.md
+          gh pr edit "$PR_NUMBER" --body-file "$RELEASE_REVIEW_PATH"
           milestone_name="$(python - <<'PY'
           import os
           import re

.github/workflows/release-pr.yml

@@ -92,20 +92,31 @@ jobs:
           fi
           git commit -m "Bump version to ${RELEASE_VERSION}"
           git push --set-upstream origin "$branch"
+      - name: Prepare Codex output
+        id: codex-output
+        run: |
+          set -euo pipefail
+          output_dir=".tmp/codex/outputs"
+          output_file="${output_dir}/release-review.md"
+          mkdir -p "$output_dir"
+          echo "output_file=${output_file}" >> "$GITHUB_OUTPUT"
       - name: Run Codex release review
         uses: openai/codex-action@v1
         with:
           openai-api-key: ${{ secrets.PROD_OPENAI_API_KEY }}
           prompt-file: .github/codex/prompts/release-review.md
-          output-file: release-review.md
+          output-file: ${{ steps.codex-output.outputs.output_file }}
           safety-strategy: drop-sudo
           sandbox: read-only
       - name: Build PR body
+        env:
+          RELEASE_REVIEW_PATH: ${{ steps.codex-output.outputs.output_file }}
         run: |
           python - <<'PY'
+          import os
           import pathlib
 
-          report = pathlib.Path("release-review.md").read_text()
+          report = pathlib.Path(os.environ["RELEASE_REVIEW_PATH"]).read_text()
           pathlib.Path("pr-body.md").write_text(report)
           PY
       - name: Create or update PR