build(release): publish the package from a release workflow

[erkamyaman]

Adds a Release workflow (.github/workflows/release.yml) so the package is published from GitHub Actions instead of by hand.

What it does

Run by hand from the Actions tab, on main only, with a version (patch, minor or an exact x.y.z):

1. Runs the CI checks on the commit (ci.yml as a reusable workflow).
2. Sets the version in packages/devtools/package.json.
3. Takes the release notes from the ## <version> section of packages/devtools/CHANGELOG.md, and stops if there isn't one.
4. Packs the package and checks the tarball with pnpm verify:publish --tarball=....
5. Publishes with --provenance through npm trusted publishing (OIDC, no token stored). It skips the publish if that version is already on npm, so a rerun finishes a half-done release.
6. Commits the version, tags devtools@<version> and creates the GitHub release.

publishing.md covers the one-time setup and each release, and keeps the manual commands as a fallback.

Setup needed before the first run

• On npmjs.com, in the @pangular-inspector/devtools settings, add a trusted publisher: GitHub Actions, owner pangular-inspector, repository devtools, workflow release.yml, no environment.
• If main is protected, let GitHub Actions push the version commit and tag.
• Settings > Actions > Workflow permissions: "Read and write".

Checks

• actionlint and pnpm format:check pass
• Changelog section extraction and the version bump (patch, minor, exact) checked locally, including 0.0.7 vs 0.0.70
• pnpm verify:publish --tarball=... passed locally

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 1555489

Command	Status	Duration	Result
nx affected -t test build	✅ Succeeded	1m 13s	View ↗

💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗

---

☁️ Nx Cloud last updated this comment at 2026-10-03 13:49:56 UTC