From 907be27bc25ae6f5172a545084733e0192cbb408 Mon Sep 17 00:00:00 2001
From: Ryan Bas <ryanbas21@gmail.com>
Date: Tue, 12 May 2026 16:01:05 -0600
Subject: [PATCH] fix(ci): wire extension publishing to release via
 workflow_call

GITHUB_TOKEN-created releases don't trigger other workflows, so the
publish-extension workflow never ran after changesets published packages.

- Replace release[published] trigger with workflow_dispatch + workflow_call
- Chain publish-extensions from release.yml when changesets publishes
- Pass secrets with secrets: inherit for store credentials

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .github/workflows/publish-extension.yml | 4 ++--
 .github/workflows/release.yml           | 9 +++++++++
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish-extension.yml b/.github/workflows/publish-extension.yml
index 2311959..baa9b8a 100644
--- a/.github/workflows/publish-extension.yml
+++ b/.github/workflows/publish-extension.yml
@@ -1,8 +1,8 @@
 name: Publish Extensions
 
 on:
-  release:
-    types: [published]
+  workflow_dispatch:
+  workflow_call:
 
 jobs:
   publish-chrome:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2b42a80..ff04b44 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -97,6 +97,8 @@ jobs:
   release:
     if: github.event_name == 'push'
     runs-on: ubuntu-latest
+    outputs:
+      published: ${{ steps.changesets.outputs.published }}
     permissions:
       contents: write
       pull-requests: write
@@ -120,6 +122,7 @@ jobs:
           BUILD_NUMBER: ${{ github.run_number }}
 
       - name: Create release PR or publish
+        id: changesets
         uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0
         with:
           publish: pnpm release
@@ -130,3 +133,9 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_CONFIG_PROVENANCE: true
           BUILD_NUMBER: ${{ github.run_number }}
+
+  publish-extensions:
+    needs: release
+    if: needs.release.outputs.published == 'true'
+    uses: ./.github/workflows/publish-extension.yml
+    secrets: inherit