chore: add raw changeset validation and improve npm publishing process

Author: addon-owner

.changeset/happy-rocks-share.md

@@ -0,0 +1,9 @@
+---
+"@addon-core/storage": patch
+---
+
+add check for raw changeset files and improve npm publishing
+
+- Added a pre-publish step in `release-publish.yml` to identify and prevent publishing with raw changeset files on the main branch.
+- Updated the publish action to use `npm run release`.
+- Enhanced `release-prepare.yml` to disable Husky and force push changes in branch preparation.

.changeset/violet-sheep-find.md

@@ -53,12 +53,15 @@ jobs:
       - name: Commit version & changelog changes into prep branch
         if: steps.changes.outputs.has_changes == 'true'
         uses: stefanzweifel/git-auto-commit-action@v5
+        env:
+          HUSKY: 0
         with:
           commit_message: "chore: version packages (prepare release)"
           commit_user_name: github-actions[bot]
           commit_user_email: 41898282+github-actions[bot]@users.noreply.github.com
           branch: changeset/prepare-${{ github.ref_name }}
           create_branch: true
+          push_options: --force-with-lease
 
       - name: Open or update PR to release branch
         if: steps.changes.outputs.has_changes == 'true'

.github/workflows/release-prepare.yml

@@ -32,14 +32,26 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Create Release PR or Publish to npm
+      - name: Ensure no raw changeset files on main
+        id: check_changesets
+        run: |
+          if ls .changeset/*.md >/dev/null 2>&1; then
+            echo "found=true" >> "$GITHUB_OUTPUT"
+            echo "::error::Raw changeset files found on main. This indicates the prepare step wasn't applied in a release/* branch. Skipping publish to prevent auto PR creation. Remove or consume changesets via 'changeset version' in a release/* branch, then finish release." >&2
+          else
+            echo "found=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Create GitHub Release and Publish to npm via Changesets
+        if: steps.check_changesets.outputs.found == 'false'
         uses: changesets/action@v1
         with:
-          publish: npm publish --provenance --access public
+          publish: npm run release
           createGithubReleases: true
           commitMode: github-api
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_CONFIG_PROVENANCE: "true"
           HUSKY: 0