PNPM_VERSION: "10.33.0"

jobs:

validate_dispatch_ref:

name: Validate dispatch ref

runs-on: blacksmith-8vcpu-ubuntu-2404

steps:

- name: Require main workflow ref

env:

WORKFLOW_REF: ${{ github.ref }}

run: |

set -euo pipefail

if [[ "${WORKFLOW_REF}" != "refs/heads/main" ]]; then

echo "NPM Telegram beta E2E must be dispatched from main so workflow logic stays controlled." >&2

exit 1

fi

approve_release_manager:

name: Approve npm Telegram beta E2E

needs: validate_dispatch_ref

runs-on: ubuntu-latest

environment: npm-release

steps:

DOCKER_BUILD_SUMMARY: "false"

DOCKER_BUILD_RECORD_UPLOAD: "false"

steps:

- name: Checkout main

- name: Checkout dispatch ref

uses: actions/checkout@v6

with:

ref: ${{ github.sha }}

expect(workflow).toContain("approve_release_manager:");

expect(workflow).toContain("environment: npm-release");

expect(workflow).toContain("needs: approve_release_manager");

expect(workflow).not.toContain("Require main workflow ref");

expect(workflow).not.toContain("refs/heads/main");

expect(workflow).not.toContain('new Set(["admin", "write"])');

expect(workflow).not.toContain("data.role_name");

expect(workflow).not.toContain("github.rest.teams.listMembersInOrg");