[devfive-relay-c70423]

The release workflow failed after merging #84 because Changepacks runs each publish command from the package directory. Bun tried to create .changepacks/publish.tgz in a missing package-local directory, while npm was configured to read a different archive at the repository root.

Both publish commands now create and read ./publish.tgz in the same package directory. Each package has its own archive, so parallel package publishing cannot overwrite another package's tarball. Bun packaging continues to resolve workspace dependencies before npm receives the archive.

This PR changes only the publish configuration. A separate workflow enhancement was prepared and validated to execute these exact dry-run commands for every package on PRs. The company GitHub relay rejected the push containing the workflow change, so that enhancement is preserved locally as .cache/publish-workflow-verification.patch and is not included here.

Validation:

• Reproduced the original ENOENT with Bun 1.4.4 and the previous publish dry-run command.
• Built all workspace packages with Bun 1.4.4.
• Executed the proposed workflow shell block locally: all 12 package tarballs and configured npm publish dry-runs passed. The artifact validation used an isolated offline npm cache to avoid rejecting already-published versions; actual release commands retain normal online behavior.
• bun run lint passed.
• All 1,184 tests passed with 100% function and line coverage in the commit hook.

Failed release run: https://github.com/dev-five-git/devup-api/actions/runs/41946823398/job/126981156397

---

Submitted via Devfive hub.
Employee Git identity (self-declared): <>
Device: 3099154426bffbeef8b62999b80bb038

[github-actions]

Changepacks