fix: trigger publish workflow only on v*.*.* tags

[Copilot]

Summary

• publish.yml was triggering on every push to master, then hard-failing if HEAD had no tag — causing noisy failed runs on every normal merge.

Why

• Publishing should only occur on explicit version tag pushes, not on all merges to master. The previous approach of failing after triggering is wasteful and misleading.

Changes

• Trigger: Replaced on.push.branches: [master] with on.push.tags: ["v*.*.*"] — workflow now fires only when a version tag is pushed.
• Removed: "Validate tag exists on this push" shell step — no longer needed since the trigger itself enforces the tag requirement.
• Removed: fetch-depth: 0 from checkout — was only needed by git describe in the deleted validation step.

# Before
on:
  push:
    branches:
      - master

# After
on:
  push:
    tags:
      - "v*.*.*"

Checklist

• Added/updated tests (if behavior changed)
• npm run lint passes
• npm run typecheck passes
• npm test passes
• npm run build passes
• Added a changeset (npx changeset) if this affects consumers

Notes

• workflow_dispatch is preserved so maintainers can still trigger a publish manually if needed.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud