prevent remote release

js/forge.config.ts

@@ -41,7 +41,13 @@ const config: ForgeConfig = {
   rebuildConfig: {},
   makers: [
     new MakerSquirrel((arch) => ({
-      remoteReleases: `https://storage.googleapis.com/flowy-releases/llink/win32/${arch}`,
+      // `remoteReleases` is only useful when producing delta packages against a
+      // previously-published build. During a plain `make` (no publish), Squirrel
+      // fetches this URL and fails with a 404 if nothing has been uploaded yet.
+      // Gate it on SQUIRREL_REMOTE_RELEASES=1 which the publish workflow sets.
+      ...(process.env.SQUIRREL_REMOTE_RELEASES === '1' ? {
+        remoteReleases: `https://storage.googleapis.com/flowy-releases/llink/win32/${arch}`,
+      } : {}),
       // Windows code signing via Azure Trusted Signing. Dormant unless the workflow
       // provisions the dlib + metadata file and exports these env vars, so local
       // `yarn make` and unsigned CI builds both work unchanged.