From f7718d9a91ef6d618bc724cbc9bf9c95b0453df3 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <peter@steipete.me>
Date: Wed, 15 Jul 2026 03:14:59 -0700
Subject: [PATCH] test(release): cover protected plugin publish refs (#108227)

---
 test/scripts/plugin-npm-extended-stable-workflow.test.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/test/scripts/plugin-npm-extended-stable-workflow.test.ts b/test/scripts/plugin-npm-extended-stable-workflow.test.ts
index 18af149bd4f0..5db665dea85a 100644
--- a/test/scripts/plugin-npm-extended-stable-workflow.test.ts
+++ b/test/scripts/plugin-npm-extended-stable-workflow.test.ts
@@ -357,12 +357,14 @@ describe("plugin npm extended-stable workflow", () => {
     );
     expect(consume.run).toContain("--workflow-jobs-metadata");
     expect(consume.run).toContain("--source-package-json-sha256");
+    expect(consume.run).toContain("sha_pinned_release_publish=false");
     expect(consume.run).toContain(
       '[[ "$WORKFLOW_REF" =~ ^refs/tags/release-publish/([a-f0-9]{12})-[1-9][0-9]*$ ]]',
     );
     expect(consume.run).toContain(
       '[[ "$WORKFLOW_SHA" =~ ^[a-f0-9]{40}$ && "${WORKFLOW_SHA:0:12}" == "$workflow_sha_prefix" ]]',
     );
+    expect(consume.run).toContain("sha_pinned_release_publish=true");
     expect(consume.run).toContain(
       '[[ "$WORKFLOW_REF" == "refs/heads/main" || "$sha_pinned_release_publish" == "true" ]]',
     );