From 7ced10dc1c54d5a119d902cb4b65b89753834a36 Mon Sep 17 00:00:00 2001
From: Krishnam Murarka <83580811+KRISHNAMMurarka@users.noreply.github.com>
Date: Mon, 24 Aug 2026 17:59:34 +0530
Subject: [PATCH] fix(release): verify immutable tag metadata directly

---
 .github/workflows/release.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 63a350a..8a2e0c2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,13 +34,13 @@ jobs:
         with:
           node-version: 24.x
       - name: Validate tag, package version, and changelog
-        env:
-          GITHUB_REF_NAME: ${{ inputs.tag }}
         shell: bash
         run: |
           set -euo pipefail
-          npm run release:verify -- "$RELEASE_TAG"
+          package_version="$(node -p "require('./package.json').version")"
+          test "$RELEASE_TAG" = "v$package_version"
           test "$(git describe --tags --exact-match HEAD)" = "$RELEASE_TAG"
+          grep -Fq "## $package_version -" CHANGELOG.md
       - name: Run project checks
         run: npm run check
       - name: Build checksummed release assets