From e96275efba80c7aae39ef2ec8fe7bb0ca7285808 Mon Sep 17 00:00:00 2001
From: Serj Babayan <hello@serjb.com>
Date: Mon, 8 Jun 2026 16:30:48 -0700
Subject: [PATCH] Try enabling trusted publisher auth pt2

---
 .github/workflows/release.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6207124..431a886 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -152,7 +152,16 @@ jobs:
 
       - name: Publish to npm
         working-directory: npm
-        run: npm publish --access public
+        env:
+          TAG: ${{ github.event.release.tag_name || github.event.inputs.tag }}
+        run: |
+          # Prereleases (rc) must publish under a non-latest dist-tag so that
+          # `npm install` keeps resolving to the last stable release.
+          if [[ "$TAG" == *rc* ]]; then
+            npm publish --access public --tag rc
+          else
+            npm publish --access public --tag latest
+          fi
 
   publish-homebrew:
     needs: release