refactor(ci): unify release pipeline under publish.yml (closes #1609)#1610

Merged

magyargergo merged 14 commits into

mainfrom

ci/unify-publish-workflow

May 16, 2026

Commits on May 15, 2026

refactor(ci): unify release pipeline under publish.yml (#1609)
magyargergo
committed
fix(ci): address zizmor findings on unified publish.yml
magyargergo
committed
feat(ci): adopt npm Trusted Publishing, GitHub App tokens, explicit secrets
magyargergo
committed
fix(ci): attribute RC release commit to the GitHub App, not github-actions[bot]
magyargergo
committed
Merge branch 'main' into ci/unify-publish-workflow
magyargergo
authored
fix(ci): address code-review findings on unified publish.yml
magyargergo
committed
fix(ci): read RELEASE_APP_ID from secrets, not vars
magyargergo
committed
fix(ci): allow dry_run dispatch on any branch ref
magyargergo
committed
fix(ci): scope dry_run merge-blocker to PR + main-push events only
magyargergo
committed
fix(ci): use client-id input on create-github-app-token
magyargergo
committed
chore(ci): remove dry_run rehearsal scaffolding (pre-merge cleanup)
magyargergo
committed
Merge branch 'main' into ci/unify-publish-workflow
magyargergo
authored

Commits on May 16, 2026