adjust release conditions

Author: MarketDataDev03

.github/workflows/publish.yml

@@ -14,8 +14,28 @@ on:
         default: false
 
 jobs:
+  guard:
+    name: Require green main.yml for this commit
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+    steps:
+      - name: Check latest main.yml conclusion
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          conclusion=$(gh api \
+            "repos/${{ github.repository }}/actions/workflows/main.yml/runs?head_sha=${{ github.sha }}&status=completed" \
+            --jq '.workflow_runs[0].conclusion // "missing"')
+          echo "main.yml conclusion for ${{ github.sha }}: $conclusion"
+          if [ "$conclusion" != "success" ]; then
+            echo "::error::main.yml is not green for ${{ github.sha }} (got: $conclusion). Run publish from a commit on main whose CI passed."
+            exit 1
+          fi
+
   publish:
     name: Publish to Maven Central
+    needs: guard
     runs-on: ubuntu-latest
     environment:
       name: maven-central