Validate first the changes

Author: Rub21

.github/workflows/release.yml

@@ -11,32 +11,29 @@ on:
           - minor
           - major
         default: patch
-      dry_run:
-        description: 'Dry run (no push, no publish to npm)'
-        type: boolean
-        default: false
 
 concurrency:
   group: release
   cancel-in-progress: false
 
 jobs:
   release:
+    if: github.ref_name == 'staging'
     runs-on: ubuntu-latest
     permissions:
       contents: write
       id-token: write
     steps:
-      - name: Verify branch (real releases only from staging)
-        if: inputs.dry_run == false
+      - name: Verify staging branch
         run: |
           if [ "${{ github.ref_name }}" != "staging" ]; then
-            echo "::error::Real releases can only run from 'staging' (got: ${{ github.ref_name }}). Enable 'dry_run' to test from another branch."
+            echo "::error::Releases can only be triggered from the 'staging' branch (got: ${{ github.ref_name }})"
             exit 1
           fi
 
       - uses: actions/checkout@v4
         with:
+          ref: staging
           fetch-depth: 0
 
       - uses: actions/setup-node@v4
@@ -59,21 +56,9 @@ jobs:
           git add package.json package-lock.json dist/
           git commit -m "Packaging ${NEW_VERSION} with rebuilt /dist"
           git tag "v${NEW_VERSION}"
-          echo "NEW_VERSION=${NEW_VERSION}" >> "$GITHUB_ENV"
 
       - name: Push to GitHub
-        if: inputs.dry_run == false
-        run: git push origin ${{ github.ref_name }} --follow-tags
-
-      - name: Publish to npm (dry run)
-        if: inputs.dry_run == true
-        run: npm publish --provenance --access public --dry-run
+        run: git push origin staging --follow-tags
 
       - name: Publish to npm with provenance
-        if: inputs.dry_run == false
         run: npm publish --provenance --access public
-
-      - name: Dry run summary
-        if: inputs.dry_run == true
-        run: |
-          echo "::notice::Dry run complete. Would publish v${NEW_VERSION}. No commits or tags pushed; nothing uploaded to npm."

.github/workflows/validate.yml

@@ -0,0 +1,26 @@
+name: Validate build
+
+on:
+  push:
+    branches-ignore:
+      - staging
+  pull_request:
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+          registry-url: 'https://registry.npmjs.org'
+
+      - run: npm ci
+
+      - name: Build /dist
+        run: npm run build
+
+      - name: Validate npm package (dry-run)
+        run: npm publish --dry-run