Fourier cbbb11b47f ci(release): add secret pre-flight, npm dry-run, and post-publish verify ...

- Pre-flight checks HOMEBREW_TAP_TOKEN and NPM_TOKEN are non-empty
  (catches empty-secret mistakes before anything runs)
- npm publish step now runs whoami + publish --dry-run before real publish
  (catches auth failures at the same step, not mid-release)
- Verify step polls npm view to confirm the version landed
  (fail fast if publish silently didn't work)

Prevents the v0.4.0 ghost release where GitHub had the tag but npm didn't.

2026-04-18 14:13:02 +08:00

..

release.yml

ci(release): add secret pre-flight, npm dry-run, and post-publish verify

2026-04-18 14:13:02 +08:00

test.yml

ci: pin Go 1.24 for lint job (match go.mod)

2026-02-19 06:14:36 +08:00