The workflow rsynced an upstream tarball over the checkout with --delete,
discarding every local modification outside the excluded paths. Any fix
applied to an installation was silently reverted and committed on the next
update, including fixes to the update mechanism itself.
It also fetched releases/latest, which 404s for a repository with no
published releases, so the first step failed before doing anything.
Fetch and merge the upstream default branch instead. This preserves local
commits, matches the behaviour the README documents, drops the dependency on
published releases, and fails loudly on conflict rather than discarding work.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Hieu Nguyen (Jack)