From 96a1266b1e581257560bbb6c5665de029fcd1684 Mon Sep 17 00:00:00 2001
From: Jehyun Jung <congmul@hotmail.com>
Date: Mon, 9 Mar 2026 17:59:05 -0700
Subject: [PATCH] update pipeline

---
 .github/workflows/publish.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 45f0a43..e90efd5 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -24,6 +24,17 @@ jobs:
             exit 1
           fi
 
+      - name: Validate tag matches package.json version
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          TAG_VERSION="${GITHUB_REF#refs/tags/v}"
+          PACKAGE_VERSION=$(node -p "require('./package.json').version")
+          if [ "$TAG_VERSION" != "$PACKAGE_VERSION" ]; then
+            echo "Tag version (v$TAG_VERSION) does not match package.json version ($PACKAGE_VERSION). Aborting publish."
+            exit 1
+          fi
+          echo "✓ Tag version matches package.json version: $PACKAGE_VERSION"
+
       - name: Setup Node
         uses: actions/setup-node@v4
         with: