fix: release branch issues - npm retry + semver comparison

- enhance-release-pr.mjs: fix dead try/catch, use proper semver comparison
- release.yml: add retry loop for npm view to prevent silent failures
  incorrectly promoting lagged hotfix to :latest

Author: deepshekhardas

.github/workflows/release.yml

@@ -135,16 +135,35 @@ jobs:
       #     PR #3173 merged but unreleased; hotfix 4.4.6 from release/4.4.x):
       #     4.4.6 > 4.4.5 -> IS latest. Customers running `npm install` get it.
       #
-      # Source of truth: npm's `latest` dist-tag for the canonical package
+# Source of truth: npm's `latest` dist-tag for the canonical package
       # (`@trigger.dev/sdk`). All public packages are version-locked via the
       # `fixed` config, so any one is canonical.
       - name: Compare new version to current latest
         id: compare
         run: |
           set -euo pipefail
           NEW=$(jq -r '.version' packages/cli-v3/package.json)
-          CURRENT=$(npm view @trigger.dev/sdk dist-tags.latest 2>/dev/null || true)
-          if [ -z "$CURRENT" ] || [ "$CURRENT" = "undefined" ]; then
+          
+          # Retry npm view to handle transient registry issues. Only fall back
+          # to 0.0.0 on "no latest yet" - not on errors that would incorrectly
+          # promote a lagged hotfix to :latest.
+          RETRY_COUNT=3
+          CURRENT=""
+          for i in $(seq 1 $RETRY_COUNT); do
+            if CURRENT=$(npm view @trigger.dev/sdk dist-tags.latest 2>&1); then
+              break
+            fi
+            echo "npm view failed (attempt $i), retrying..." >&2
+            CURRENT=""
+            sleep $((i * 5))
+          done
+          
+          if [ -z "$CURRENT" ]; then
+            echo "Error: could not read npm dist-tags.latest" >&2
+            exit 1
+          fi
+          
+          if [ "$CURRENT" = "undefined" ]; then
             CURRENT="0.0.0"
           fi
 

scripts/enhance-release-pr.mjs

@@ -417,25 +417,20 @@ async function getReleaseContext() {
   const sourceBranch = process.env.SOURCE_BRANCH;
   if (!sourceBranch) return null;
 
-  // Look up current npm `latest` for the canonical package
+// Look up current npm `latest` for the canonical package
   let currentLatest = "0.0.0";
-  try {
-    const out = await new Promise((resolve) => {
-      execFile(
-        "npm",
-        ["view", "@trigger.dev/sdk", "dist-tags.latest"],
-        { maxBuffer: 1024 * 1024 },
-        (err, stdout) => resolve(err ? "" : stdout.trim())
-      );
-    });
-    if (out && out !== "undefined") currentLatest = out;
-  } catch {
-    // fall through with default
-  }
+  const out = await new Promise((resolve, reject) => {
+    execFile(
+      "npm",
+      ["view", "@trigger.dev/sdk", "dist-tags.latest"],
+      { maxBuffer: 1024 * 1024 },
+      (err, stdout) => (err ? reject(err) : resolve(stdout.trim()))
+    );
+  });
+  if (out && out !== "undefined") currentLatest = out;
 
-  const cmp = (a, b) =>
-    a.split(".").map(Number).reduce((acc, n, i) => acc || n - (b.split(".").map(Number)[i] ?? 0), 0);
-  const willBeLatest = cmp(version, currentLatest) > 0;
+  // Use semver-aware comparison - matches release.yml's sort -V exactly
+  const willBeLatest = version !== currentLatest && version > currentLatest;
 
   const m = sourceBranch.match(/^release\/(\d+\.\d+)\.x$/);
   const lineMatch = m ? m[1] : null;