From bb7314bc37208bf291aba920f5a99c09b4e266cd Mon Sep 17 00:00:00 2001
From: jordanthejet <morepencils@gmail.com>
Date: Sat, 7 Mar 2026 17:45:50 -0500
Subject: [PATCH] fix(ci): add default-branch guard to beta release
 workflow_dispatch

Prevent manual beta releases from non-default branches by gating
the version job on github.ref matching the default branch. Off-branch
dispatches now fail closed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e4f2873a3..805f8d8d1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,6 +20,7 @@ env:
 
 jobs:
   version:
+    if: github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
     name: Resolve Version
     runs-on: ubuntu-latest
     outputs: