forbid prereleasing to npm tag @latest (#3927)

* forbid prereleasing to npm tag latest

* add other tags that shouldn't be published to

* remove canary from the forbidden list since it uses the prerelease flow

scripts/release/prerelease.ts

@@ -65,6 +65,12 @@ export async function runPrerelease({
     );
   }
 
+  if (FORBIDDEN_TAGS.includes(npmTag)) {
+    throw Error(
+      `Publishing to npm tag ${npmTag} is not allowed for prereleases`
+    );
+  }
+
   const sha = await getCurrentSha();
   const updates = await getAllPackages();
   const pkgJsons = await Promise.all(
@@ -97,6 +103,8 @@ export async function runPrerelease({
   }
 }
 
+const FORBIDDEN_TAGS = ['latest', 'next', 'exp'];
+
 interface PrereleaseOptions {
   prereleaseName: string;
   npmTag: string;