fix(ci): disable aws-chunked encoding for OSS uploads (#43)

AWS CLI v2.23 enabled default integrity protections that wrap PUT bodies
in aws-chunked encoding with a CRC32 trailer. Aliyun OSS rejects this
(InvalidArgument: aws-chunked encoding is not supported with the
specified x-amz-content-sha256 value).

Set request_checksum_calculation / response_checksum_validation to
when_required so the CLI only applies trailer-based checksums when an
operation explicitly demands them. PUT object falls back to plain
sigv4-signed bodies. Object integrity is still anchored elsewhere
(SHA256 in checksums.txt verified by install.sh).

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: ysyneu

.github/workflows/goreleaser.yml

@@ -65,6 +65,11 @@ jobs:
           # AWS CLI defaults to path-style for custom endpoints, so force
           # virtual-hosted style. Harmless for endpoints that accept either.
           aws configure set default.s3.addressing_style virtual
+          # AWS CLI v2.23+ enabled default integrity protections that add
+          # `aws-chunked` request encoding, which OSS rejects with
+          # InvalidArgument. Restore the pre-2.23 behavior.
+          aws configure set default.request_checksum_calculation when_required
+          aws configure set default.response_checksum_validation when_required
 
           # Normalize PREFIX: strip both leading and trailing slashes so a
           # value of "/" or "/foo/" doesn't produce a doubled or leading slash

.github/workflows/install-sh.yml

@@ -133,6 +133,10 @@ jobs:
           fi
           # Aliyun OSS rejects path-style requests; force virtual-hosted style.
           aws configure set default.s3.addressing_style virtual
+          # AWS CLI v2.23+ default integrity protections add `aws-chunked`
+          # encoding which OSS rejects (InvalidArgument). Restore old behavior.
+          aws configure set default.request_checksum_calculation when_required
+          aws configure set default.response_checksum_validation when_required
           PREFIX="${PREFIX#/}"; PREFIX="${PREFIX%/}"
           key="${PREFIX:+${PREFIX}/}install.sh"
           aws --endpoint-url="$ENDPOINT" s3 cp install.sh "s3://${BUCKET}/${key}" \