fix(release): add preflight checks for version consistency in publish workflow

Author: yan-ad

.github/workflows/publish.yml

@@ -40,6 +40,29 @@ jobs:
       - name: Build
         run: bun run build
 
+      - name: Preflight publish context
+        run: |
+          set -euo pipefail
+
+          PACKAGE_NAME="$(node -p \"require('./package.json').name\")"
+          PACKAGE_VERSION="$(node -p \"require('./package.json').version\")"
+          TAG_NAME="${GITHUB_REF_NAME}"
+
+          echo "Repository: ${GITHUB_REPOSITORY}"
+          echo "Workflow: ${GITHUB_WORKFLOW}"
+          echo "Ref: ${GITHUB_REF}"
+          echo "Tag: ${TAG_NAME}"
+          echo "Package: ${PACKAGE_NAME}"
+          echo "Version: ${PACKAGE_VERSION}"
+
+          echo "Current npm version (if already published):"
+          npm view "${PACKAGE_NAME}" version || true
+
+          if [ "${TAG_NAME}" != "v${PACKAGE_VERSION}" ]; then
+            echo "Tag (${TAG_NAME}) does not match package version (v${PACKAGE_VERSION})."
+            exit 1
+          fi
+
       - name: Publish to npm (Trusted Publisher)
         run: npm publish --provenance --access public
 

package.json

@@ -58,7 +58,7 @@
     "clean": "rimraf .vite dist",
     "changelog": "changelogen --output CHANGELOG.md",
     "changelog:bump": "changelogen --bump --output CHANGELOG.md",
-    "release": "bun run build && changelogen --release --output CHANGELOG.md && (git rev-parse -q --verify refs/tags/v$npm_package_version >/dev/null || git tag v$npm_package_version) && git push origin v$npm_package_version"
+    "release": "bun run build && changelogen --bump --output CHANGELOG.md && (git rev-parse -q --verify refs/tags/v$npm_package_version >/dev/null || git tag v$npm_package_version) && git push origin v$npm_package_version"
   },
   "publishConfig": {
     "access": "public"