[neilime]

Extend the single-package release process to public npm/pnpm workspaces and fixed or independent Lerna packages. Existing single-package callers keep their inputs and outputs.

• Preparation updates manifests and lockfiles, signs the prepared commit, and atomically pushes the commit and tags. Lerna uses native version planning without generating a changelog file.
• Preparation and release accept partial YAML/JSON configuration overrides through the public ci-github-publish interfaces. Manual force preserves higher Conventional Commit plans and uses a patch fallback when necessary; schedules and tag recovery ignore force.
• CI discovers public packages from workspace configuration, with an explicit directory override when needed. It validates package contents and optional isolated-consumer commands, then collects validated artifacts while preserving successful results across partial reruns. Consumer project fixtures can supply test dependencies without changing the source tree.
• Release verifies prepared packages and their artifacts, completes draft notes and optional summaries before npm publication, recovers original registry bytes on retries, and checks asset digests before final publication. Independent releases receive package-specific notes and assets.
• GitHub artifact ownership, tag identity and published-state checks delegate to the shared release verifier. The existing Codecov action delegates to the shared uploader; package rules and release grouping remain here.

CI and publication remain separate. Actions keep their own dependencies, and the pull-request CI entry point is unchanged. The existing ADR and generated action documentation describe the final implementation.

Shared dependencies for this PR:

• ci-github-publish #495: read-only release verification, also used by PHP.
• ci-github-common #626: Codecov upload and dependency setup.

The new shared actions are pinned to reviewed PR commits. Update these pins to stable shared releases before merging; other publication actions remain on ci-github-publish 2.0.0.

Validation: focused package/release tests and composed Node.js/shared-action checks pass locally. The composition check preserves independent package scopes, artifact bindings and published-state outputs. Shared verifier tests cover stale artifacts, annotated tags, drafts, conflicting commits and API errors. make lint passes and references were regenerated with CI Dokumentor. All GitHub Actions checks pass on the updated head, including the standalone action tests and end-to-end CI workflows with and without containers.

Scope is stable public npm packages on GitHub.com and npmjs.org. Prereleases and custom registries are outside this PR.

[github-actions]

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_COMMITLINT	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0

[github-actions]

Code Coverage Report

Coverage Results

Coverage

Metric	Covered	Total	Percentage
Lines	2	2	100.00%
Functions	1	1	100.00%

Overall: 100.00% 🟢
🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (31cd29b) to head (dad0f55).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #563   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            3         3           
=========================================
  Hits             3         3           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.