From 6d2aeddf919d1a2cea2fc12a18583809beb0bde7 Mon Sep 17 00:00:00 2001
From: Anh Nguyen <ngleanh@gmail.com>
Date: Mon, 27 Jul 2026 14:39:48 +0700
Subject: [PATCH] fix(ci): harden release tag handling

---
 .github/workflows/release.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5cb33bb..8669cb2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,11 +19,12 @@ jobs:
           node-version: 22
 
       - name: Verify package version matches tag
+        env:
+          TAG_VERSION: ${{ github.event.release.tag_name }}
         run: |
           set -euo pipefail
 
           PACKAGE_VERSION=$(node -p "require('./package.json').version")
-          TAG_VERSION="${{ github.event.release.tag_name }}"
 
           if [ "$PACKAGE_VERSION" != "$TAG_VERSION" ]; then
             echo "Version mismatch: package.json is $PACKAGE_VERSION but tag is $TAG_VERSION."
@@ -93,10 +94,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Verify npm package version
+        env:
+          TAG: ${{ github.event.release.tag_name }}
         run: |
           set -euo pipefail
 
-          TAG="${{ github.event.release.tag_name }}"
           ATTEMPTS=10
           SLEEP_SECONDS=10