ci: auto-stage npm releases

[0thernet]

Summary

• trigger the existing staged npm pipeline when a stable package version reaches main
• treat package.json edits with an unchanged version as a successful no-op
• retain manual recovery dispatch and fail-closed source, version, registry, and artifact checks
• gate the sole OIDC staging job behind the protected npm-stage environment while preserving npm staged publishing and separate 2FA approval
• document reviewer 0thernet, prevent_self_review: false, and the exact npm trusted-publisher environment binding

Validation

• bun test scripts/release-workflow.test.ts (10 pass, 320 expectations)
• bun run check
• git diff --check

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
atet	Ready	Preview	Aug 28, 2026 4:03am