From 988e16cc78eea334a479d9aa5153dd88a2720bd6 Mon Sep 17 00:00:00 2001 From: Duncan Faulkner Date: Wed, 30 Sep 2026 07:53:57 +0100 Subject: [PATCH] ci(release): run the npm publish in the protected npm-publish environment Each release (dry runs too) now waits for a required reviewer's approval and only runs from main. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/release-pack.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/release-pack.yml b/.github/workflows/release-pack.yml index 3b4f610..4df0736 100644 --- a/.github/workflows/release-pack.yml +++ b/.github/workflows/release-pack.yml @@ -31,6 +31,9 @@ concurrency: jobs: release: name: Publish @ngbracket/a11y-devtools + # Protected environment: every run (dry runs too) waits for a required + # reviewer to approve it in the Actions UI, and only runs from main. + environment: npm-publish runs-on: ubuntu-latest timeout-minutes: 20 steps: