fix: harden desktop release OSS uploads

server/internal/shared/objectstorage/aliyun.go

@@ -217,6 +217,26 @@ func aliyunStatusCode(err error) int {
 }
 
 func (c *aliyunClient) GetBytes(ctx context.Context, objectKey string) ([]byte, error) {
+	reader, err := c.GetReader(ctx, objectKey)
+	if err != nil {
+		return nil, err
+	}
+	defer reader.Close()
+
+	data, err := io.ReadAll(reader)
+	if err != nil {
+		c.logError(ctx, "aliyun read object failed",
+			zap.String("bucket", c.bucket),
+			zap.String("object_key", objectKey),
+			zap.Error(err),
+		)
+		return nil, fmt.Errorf("read aliyun object: %w", err)
+	}
+
+	return data, nil
+}
+
+func (c *aliyunClient) GetReader(ctx context.Context, objectKey string) (io.ReadCloser, error) {
 	if err := c.Validate(); err != nil {
 		return nil, err
 	}
@@ -243,19 +263,7 @@ func (c *aliyunClient) GetBytes(ctx context.Context, objectKey string) ([]byte,
 		}
 		return nil, fmt.Errorf("get aliyun object: %w", err)
 	}
-	defer reader.Close()
-
-	data, err := io.ReadAll(reader)
-	if err != nil {
-		c.logError(ctx, "aliyun read object failed",
-			zap.String("bucket", c.bucket),
-			zap.String("object_key", objectKey),
-			zap.Error(err),
-		)
-		return nil, fmt.Errorf("read aliyun object: %w", err)
-	}
-
-	return data, nil
+	return reader, nil
 }
 
 func isAliyunObjectNotFound(err error) bool {