ci: use workflow_call to chain CI validation before release (#1236)

Author: rfgamaral

.github/workflows/check-ci-validation.yml

@@ -1,10 +1,7 @@
 name: CI Validation
 
 on:
-    push:
-        branches:
-            - main
-            - next
+    workflow_call:
     pull_request:
         types:
             - opened

.github/workflows/publish-package-release.yml

@@ -1,14 +1,10 @@
 name: Package Release
 
 on:
-    workflow_run:
-        workflows:
-            - CI Validation
+    push:
         branches:
             - main
             - next
-        types:
-            - completed
 
 env:
     GH_PACKAGES_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }}
@@ -33,12 +29,17 @@ concurrency:
     cancel-in-progress: false
 
 jobs:
+    ci-validation:
+        name: CI Validation
+        uses: ./.github/workflows/check-ci-validation.yml
+        secrets: inherit
+
     release-and-publish:
         name: Release & Publish
         runs-on: ubuntu-latest
         timeout-minutes: 60
 
-        if: github.event.workflow_run.conclusion == 'success'
+        needs: ci-validation
 
         steps:
             - name: Checkout repository
@@ -47,10 +48,6 @@ jobs:
                   token: ${{ secrets.GH_REPO_TOKEN }}
                   fetch-depth: 0
 
-            - name: Checkout target branch
-              run: |
-                  git checkout ${{ github.event.workflow_run.head_branch }}
-
             - name: Prepare Node.js environment
               uses: actions/setup-node@v6
               with:
@@ -80,11 +77,8 @@ jobs:
             # Packages registry, providing a predictable release workflow for both registries.
             - name: Publish package to public npm registry
               id: semantic-release
-              # `GITHUB_REF` is overridden at the shell level because in `workflow_run` events
-              # it always points to the default branch, not the branch that triggered the run.
-              # The step-level `env:` block cannot override `GITHUB_*` variables in Actions.
               run: |
-                  GITHUB_REF=${{ github.event.workflow_run.head_branch }} npx semantic-release
+                  npx semantic-release
               env:
                   GITHUB_TOKEN: ${{ secrets.GH_REPO_TOKEN }}
                   GIT_AUTHOR_EMAIL: [email protected]
@@ -110,7 +104,7 @@ jobs:
               if: ${{ steps.semantic-release.outputs.package-published == 'true' }}
               id: dist-tag
               run: |
-                  if [[ "${{ github.event.workflow_run.head_branch }}" == "next" ]]; then
+                  if [[ "${{ github.ref_name }}" == "next" ]]; then
                     echo "tag=next" >> $GITHUB_OUTPUT
                   else
                     echo "tag=latest" >> $GITHUB_OUTPUT

release.config.js

@@ -17,7 +17,7 @@ module.exports = {
             },
         ],
         // Only update CHANGELOG.md and commit back on stable releases (main branch)
-        ...(process.env.GITHUB_REF === 'next'
+        ...(process.env.GITHUB_REF_NAME === 'next'
             ? []
             : [
                   '@semantic-release/changelog',
@@ -30,7 +30,7 @@ module.exports = {
               ]),
         '@semantic-release/npm',
         // Only commit artifacts back on stable releases (main branch)
-        ...(process.env.GITHUB_REF === 'next' ? [] : ['@semantic-release/git']),
+        ...(process.env.GITHUB_REF_NAME === 'next' ? [] : ['@semantic-release/git']),
         '@semantic-release/github',
         [
             '@semantic-release/exec',