From 5f032d60013f0a55c950b41e724532c1c32248e2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dai=20L=C3=B3pez?= <dpezto@gmail.com>
Date: Tue, 13 Oct 2026 20:54:38 -0700
Subject: [PATCH 1/2] ci(release): skip the windows-11-arm npm prebuild

node-gyp on the windows-11-arm image fails to find Visual Studio (ERR_CHILD_PROCESS_STDIO_MAXBUFFER), which cancelled the node build matrix and skipped the npm publish for 4.2.0 and 4.2.1. Windows on ARM installs build from source instead.
---
 .github/workflows/package-npm.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/package-npm.yml b/.github/workflows/package-npm.yml
index 018f313..b116b20 100644
--- a/.github/workflows/package-npm.yml
+++ b/.github/workflows/package-npm.yml
@@ -81,9 +81,12 @@ jobs:
     runs-on: ${{matrix.os}}
     strategy:
       matrix:
+        # windows-11-arm is left out: node-gyp on that image fails to locate
+        # Visual Studio (ERR_CHILD_PROCESS_STDIO_MAXBUFFER in its finder), which
+        # cancelled the whole matrix and skipped the 4.2.0 and 4.2.1 publishes.
+        # Windows on ARM installs fall back to building from source.
         os:
           - windows-2022
-          - windows-11-arm
           - ubuntu-24.04
           - ubuntu-24.04-arm
           - macos-15

From 998b71115fba14885bd3846c3586f963bb40c7ae Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dai=20L=C3=B3pez?= <dpezto@gmail.com>
Date: Tue, 13 Oct 2026 20:54:38 -0700
Subject: [PATCH 2/2] ci(release): allow a manual npm publish of the current
 version

A workflow_dispatch input reruns only the npm publish from release.yml, so the trusted publisher still matches, to recover a release whose npm step failed.
---
 .github/workflows/release.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index df1e658..c2c1cc2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,6 +3,14 @@ name: release
 on:
   push:
     branches: [main]
+  # Recovery path for a registry publish that failed after the release was cut.
+  # Runs from this file so npm's trusted publisher still matches.
+  workflow_dispatch:
+    inputs:
+      npm:
+        description: Publish the current version to npm
+        type: boolean
+        default: false
 
 permissions:
   contents: write
@@ -45,7 +53,7 @@ jobs:
   # the OIDC id-token.
   npm:
     needs: release-please
-    if: needs.release-please.outputs.release_created == 'true'
+    if: needs.release-please.outputs.release_created == 'true' || (github.event_name == 'workflow_dispatch' && inputs.npm)
     permissions:
       contents: read
       id-token: write