chore: fix-publish-steps

.github/actions/publish-beta/action.yml

@@ -10,7 +10,7 @@ runs:
 
     - name: Run Builds
       shell: bash
-      run: pnpm nx run-many -t build --no-agents
+      run: pnpm nx run-many -t build --no-agents --skip-nx-cache
 
     - name: Generate API Docs
       shell: bash

.github/actions/publish-release/action.yml

@@ -32,7 +32,7 @@ runs:
 
     - name: Run Builds
       shell: bash
-      run: pnpm nx run-many -t build --no-agents
+      run: pnpm nx run-many -t build --no-agents --skip-nx-cache
 
     - name: Generate API Docs
       shell: bash

.github/workflows/publish.yml

@@ -96,7 +96,17 @@ jobs:
           retention-days: 30
 
   snapshot:
-    if: ${{ github.event_name == 'workflow_dispatch' }}
+    # Guard against publishing snapshots from the protected release branch.
+    # Both github.ref (the branch selected in the UI) and inputs.branch (the
+    # free-text checkout ref) must be checked, since they are independent values
+    # and the checkout step uses inputs.branch directly.
+    if: >-
+      ${{
+        github.event_name == 'workflow_dispatch' &&
+        github.ref != 'refs/heads/changeset-release/main' &&
+        github.event.inputs.branch != 'changeset-release/main' &&
+        github.event.inputs.branch != 'refs/heads/changeset-release/main'
+      }}
     name: Publish Snapshots
     permissions:
       contents: write
@@ -123,6 +133,9 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
 
+      - name: Build all packages (skip cache)
+        run: pnpm nx run-many -t build --no-agents --skip-nx-cache
+
       # The actual npm publish that must occur in the authorized file
       - name: Publish packages with dist-tag
         run: pnpm publish -r --tag ${{ inputs.dist_tag }} --no-git-checks --access ${{ inputs.access }}

package.json

@@ -15,7 +15,7 @@
   "scripts": {
     "build": "nx affected --target=build",
     "changeset": "changeset",
-    "ci:release": "pnpm nx run-many -t build --no-agents && pnpm publish -r --no-git-checks && changeset tag",
+    "ci:release": "pnpm nx run-many -t build --no-agents --skip-nx-cache && pnpm publish -r --no-git-checks && changeset tag",
     "ci:version": "changeset version && pnpm install --no-frozen-lockfile && pnpm nx format:write --uncommitted",
     "circular-dep-check": "madge --circular .",
     "clean": "shx rm -rf ./{coverage,dist,docs,node_modules,tmp}/ ./{packages,e2e}/*/{dist,node_modules}/ ./e2e/node_modules/ && git clean -fX -e \"!.env*,nx-cloud.env\" -e \"!**/GEMINI.md\"",