fix: use pnpm pack to resolve catalog deps before npm publish

Author: onmax

.github/workflows/release.yml

@@ -3,14 +3,31 @@ name: release
 permissions:
   id-token: write
   contents: write
+  actions: read
 
 on:
   push:
     tags:
       - 'v*'
 
 jobs:
+  ci:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: pnpm
+
+      - run: pnpm install
+      - run: pnpm lint
+      - run: pnpm prepack
+      - run: pnpm test
+
   release:
+    needs: ci
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -24,13 +41,28 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
 
       - run: pnpm install
-      - run: pnpm dev:prepare
       - run: pnpm prepack
 
+      - name: Determine npm tag
+        id: npm-tag
+        run: |
+          TAG="${GITHUB_REF#refs/tags/v}"
+          if [[ "$TAG" == *"-alpha"* ]]; then
+            echo "tag=alpha" >> $GITHUB_OUTPUT
+          elif [[ "$TAG" == *"-beta"* ]]; then
+            echo "tag=beta" >> $GITHUB_OUTPUT
+          elif [[ "$TAG" == *"-rc"* ]]; then
+            echo "tag=rc" >> $GITHUB_OUTPUT
+          else
+            echo "tag=latest" >> $GITHUB_OUTPUT
+          fi
+
       - name: GitHub Release
         run: pnpm dlx changelogithub
         env:
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Publish to npm
-        run: npm publish --provenance --access public
+        run: |
+          TARBALL=$(pnpm pack)
+          npm publish "$TARBALL" --provenance --access public --tag ${{ steps.npm-tag.outputs.tag }}