From 66d09a7581dd64846b8acf41f961cc9e4af6d5a2 Mon Sep 17 00:00:00 2001
From: Andrey Kopylov <programmer.andrey@gmail.com>
Date: Fri, 8 May 2026 15:25:52 +0500
Subject: [PATCH] only main branch

---
 .github/workflows/publish.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 24ee3d4f..e8e04470 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -44,6 +44,14 @@ jobs:
             exit 1
           fi
 
+      - name: Verify tag is on main
+        run: |
+          git fetch origin main --depth=1
+          if ! git merge-base --is-ancestor "$GITHUB_SHA" origin/main; then
+            echo "::error::Tag $GITHUB_REF_NAME points to commit $GITHUB_SHA which is not on main branch"
+            exit 1
+          fi
+
       - name: Install dependencies
         run: pnpm install --frozen-lockfile --ignore-scripts