mirror of
https://github.com/react/react.git
synced 2026-09-28 21:25:11 +08:00
## Summary - Add a manual `workflow_dispatch` workflow that publishes only `react-devtools-cdt-mcp`. - Match the runtime release security model: empty default permissions, checkout of `github.sha` only, protected `npm` environment, Node 24, and OIDC trusted publishing (no `NPM_TOKEN`). Stacked on https://github.com/react/react/pull/37500 ## Test plan - [ ] Open the workflow in GitHub Actions and confirm it is `workflow_dispatch` only. - [ ] Dry-run dispatch after the version bump lands, once npm trusted publishing is configured for this package.