From a20908be2098e117ee591e03b868231a11e2a0ea Mon Sep 17 00:00:00 2001
From: therecluse26 <therecluse26@protonmail.com>
Date: Fri, 15 May 2026 16:26:11 -0400
Subject: [PATCH] ci: add workflow_run trigger to publish-packages.yml

Fixes publish-packages.yml never triggering after release.yml creates a
GitHub Release via GITHUB_TOKEN (GitHub intentionally suppresses the
release:published event in that case).

- Add workflow_run trigger firing when the "Release" workflow completes
- Update both job if: conditions to handle workflow_run, release, and
  workflow_dispatch event sources
- Add prerelease check step to publish-crates-io with skip output so
  all costly steps are skipped for prerelease tags
- Update Get release tag step in publish-npm to extract tag from
  head_branch when triggered by workflow_run, with prerelease guard
- Retain release:published trigger for manually-created releases
- All action SHAs remain pinned (no REF-148 regressions)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 .github/workflows/publish-packages.yml | 39 ++++++++++++++++++++++++--
 1 file changed, 37 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish-packages.yml b/.github/workflows/publish-packages.yml
index e533aec..1e8ac2f 100644
--- a/.github/workflows/publish-packages.yml
+++ b/.github/workflows/publish-packages.yml
@@ -3,6 +3,9 @@ name: Publish Packages
 on:
   release:
     types: [published]
+  workflow_run:
+    workflows: ["Release"]
+    types: [completed]
   workflow_dispatch:
     inputs:
       tag:
@@ -17,18 +20,39 @@ jobs:
   publish-crates-io:
     name: Publish to crates.io
     runs-on: ubuntu-latest
-    if: ${{ !github.event.release.prerelease }}
+    if: |
+      (github.event_name == 'release' && !github.event.release.prerelease) ||
+      (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') ||
+      github.event_name == 'workflow_dispatch'
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
 
+      - name: Check prerelease tag
+        id: prerelease_check
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_run" ]; then
+            TAG="${{ github.event.workflow_run.head_branch }}"
+          elif [ "${{ github.event_name }}" = "release" ]; then
+            TAG="${{ github.event.release.tag_name }}"
+          else
+            TAG="${{ github.event.inputs.tag }}"
+          fi
+          if [[ "$TAG" =~ -[a-zA-Z] ]]; then
+            echo "Skipping prerelease tag: $TAG"
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Install Rust
+        if: steps.prerelease_check.outputs.skip != 'true'
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8  # stable
 
       - name: Authenticate with crates.io (Trusted Publishing)
+        if: steps.prerelease_check.outputs.skip != 'true'
         uses: rust-lang/crates-io-auth-action@bbd81622f20ce9e2dd9622e3218b975523e45bbe  # v1.0.4
         id: auth
 
       - name: Publish to crates.io
+        if: steps.prerelease_check.outputs.skip != 'true'
         run: cargo publish
         env:
           CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
@@ -36,7 +60,10 @@ jobs:
   publish-npm:
     name: Publish to NPM
     runs-on: ubuntu-latest
-    if: ${{ !github.event.release.prerelease }}
+    if: |
+      (github.event_name == 'release' && !github.event.release.prerelease) ||
+      (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') ||
+      github.event_name == 'workflow_dispatch'
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
 
@@ -45,10 +72,18 @@ jobs:
         run: |
           if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
             TAG="${{ github.event.inputs.tag }}"
+          elif [ "${{ github.event_name }}" = "workflow_run" ]; then
+            TAG="${{ github.event.workflow_run.head_branch }}"
           else
             TAG="${{ github.event.release.tag_name }}"
           fi
 
+          # Skip prerelease tags (e.g. v1.5.1-beta.1)
+          if [[ "$TAG" =~ -[a-zA-Z] ]]; then
+            echo "Skipping prerelease tag: $TAG"
+            exit 0
+          fi
+
           # Ensure tag has 'v' prefix if it's a bare version number
           if [[ "$TAG" =~ ^[0-9]+\.[0-9]+\.[0-9]+ ]]; then
             TAG="v${TAG}"