From 2d64c5185fda89d74a281849872cd68bb4dfa265 Mon Sep 17 00:00:00 2001
From: Ilya Nixan <thenixan@gmail.com>
Date: Wed, 19 Aug 2026 20:08:04 +0300
Subject: [PATCH] chore: update publish workflow to trigger on tag pushes and
 validate version match with pubspec.yaml

---
 .github/workflows/publish.yaml | 24 ++++++++++++++++++++++--
 1 file changed, 22 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 2c3b673..bb7174a 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -1,7 +1,14 @@
 name: Publish to pub.dev
 
 on:
-  workflow_dispatch:
+  push:
+    tags:
+      # Must align with the tag pattern configured on pub.dev: 'v{{version}}'.
+      # Creating a GitHub release with a new v2.0.0 tag pushes the tag and so
+      # triggers this workflow. pub.dev rejects automated publishing from any
+      # workflow that was not triggered by a tag push, so this must stay a
+      # `push: tags:` trigger — `release:` or `workflow_dispatch` will not work.
+      - 'v[0-9]+.[0-9]+.[0-9]+'
 
 jobs:
 
@@ -20,6 +27,19 @@ jobs:
       - name: Install dependencies
         run: flutter pub get
 
+      # Fail early with a clear message if the tag and pubspec.yaml disagree.
+      # pub.dev would reject the upload anyway, but only after the whole
+      # pipeline has run and the approval has been granted.
+      - name: Check tag matches pubspec version
+        run: |
+          tag_version="${GITHUB_REF_NAME#v}"
+          pubspec_version="$(sed -n 's/^version: *//p' pubspec.yaml | tr -d '\r')"
+          if [ "$tag_version" != "$pubspec_version" ]; then
+            echo "::error::Tag ${GITHUB_REF_NAME} does not match pubspec.yaml version ${pubspec_version}"
+            exit 1
+          fi
+          echo "Publishing version ${pubspec_version}"
+
       - name: Analyze project source
         run: dart analyze --fatal-infos
 
@@ -38,4 +58,4 @@ jobs:
     uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1
     with:
       environment: pub_publish # Use this environment for approval
-      working-directory: .
\ No newline at end of file
+      working-directory: .