fix: prevent double build in deploy workflow (#2343)

Author: jremy42

.github/workflows/deploy-package.yml

@@ -5,6 +5,10 @@ on:
   schedule:
     - cron: '0 12 * * MON'
 
+permissions:
+  contents: write
+  id-token: write
+
 jobs:
   deploy:
     runs-on: ubuntu-24.04
@@ -14,6 +18,7 @@ jobs:
         with:
           fetch-depth: '0'
           persist-credentials: false
+          token: ${{ secrets.GH_TOKEN }}
       - run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
 
       - name: Setup SSH signing
@@ -47,14 +52,19 @@ jobs:
       - run: make build
 
       - name: Version package with lerna
-        run: make publish
+        run: |
+          pnpm lerna changed
+          # Commit any generated files before versioning
+          git add .
+          git commit -m "chore: update generated files" || true
+          pnpm lerna version -y --no-private --force-git-tag --create-release github
         env:
           HUSKY: 0
           GH_TOKEN: ${{ secrets.GH_TOKEN }}
 
       # https://docs.github.com/en/actions/use-cases-and-examples/publishing-packages/publishing-nodejs-packages#publishing-packages-to-the-npm-registry
       - name: Publish to npm
-        run: make publish
+        run: pnpm -r publish --access public --tag latest
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}