Martin Vogel 6aab9d5693 fix(release): atomic publish — un-draft GH release only after registries succeed ...

Previously the un-draft step ran inside the verify job, before
publish-registries. If npm or PyPI publish failed, the GitHub release
was already live but the wrappers were not — half-shipped state.

Move the un-draft into a new publish-final job that needs both
[verify, publish-registries]. If any registry fails, the GH release
stays in draft and the run can be re-tried with replace=true.

2026-05-04 23:21:26 +02:00

..

workflows

fix(release): atomic publish — un-draft GH release only after registries succeed

2026-05-04 23:21:26 +02:00

dependabot.yml

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00