From 10487b7b0d5bfc63337f13010b2adb3c44e16970 Mon Sep 17 00:00:00 2001
From: Andy Horn <andyjhorn@gmail.com>
Date: Wed, 27 May 2026 06:54:43 -0700
Subject: [PATCH] ci: add pub.dev publishing workflow

Triggers on release-please tags (v*) and published releases, then
runs dart-lang/setup-dart's reusable publish workflow with OIDC so no
pub.dev credentials need to be stored as repo secrets. Requires
"Automated publishing" to be enabled on the pub.dev package admin page
with tag pattern v{{version}}.
---
 .github/workflows/publish.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 .github/workflows/publish.yaml

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
new file mode 100644
index 0000000..935229d
--- /dev/null
+++ b/.github/workflows/publish.yaml
@@ -0,0 +1,14 @@
+name: Publish to pub.dev
+
+on:
+  push:
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+*'
+  release:
+    types: [published]
+
+jobs:
+  publish:
+    permissions:
+      id-token: write
+    uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1