From cf4be527b8553fc17f30c8785c1c02ca37def016 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mateusz=20Burzy=C5=84ski?= <mateuszburzynski@gmail.com>
Date: Sun, 24 May 2026 12:45:51 +0200
Subject: [PATCH] add pkg.pr.new

---
 .github/workflows/pkg-pr-new.yml | 31 +++++++++++++++++++++++++++++++
 package.json                     |  1 +
 pnpm-lock.yaml                   |  9 +++++++++
 3 files changed, 41 insertions(+)
 create mode 100644 .github/workflows/pkg-pr-new.yml

diff --git a/.github/workflows/pkg-pr-new.yml b/.github/workflows/pkg-pr-new.yml
new file mode 100644
index 0000000..d7348e9
--- /dev/null
+++ b/.github/workflows/pkg-pr-new.yml
@@ -0,0 +1,31 @@
+name: pkg-pr-new
+
+on: pull_request
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  publish:
+    name: Publish
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - uses: ./.github/actions/ci-setup
+        with:
+          skip-cache: true # avoid cache poisoning attacks
+
+      - name: Build
+        run: pnpm build
+
+      - run:
+          | # zizmor: ignore[use-trusted-publishing] we're not publishing to npm here
+          pnpm exec pkg-pr-new publish --pnpm --packageManager=pnpm --commentWithDev --commentWithSha
diff --git a/package.json b/package.json
index 51a42af..830c7da 100644
--- a/package.json
+++ b/package.json
@@ -42,6 +42,7 @@
     "@types/semver": "^7.5.0",
     "fs-fixture": "^2.13.0",
     "oxfmt": "^0.48.0",
+    "pkg-pr-new": "^0.0.71",
     "rolldown": "^1.0.1",
     "typescript": "^5.8.3",
     "vitest": "^4.1.6"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c11cd8d..e1f898f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -83,6 +83,9 @@ importers:
       oxfmt:
         specifier: ^0.48.0
         version: 0.48.0
+      pkg-pr-new:
+        specifier: ^0.0.71
+        version: 0.0.71
       rolldown:
         specifier: ^1.0.1
         version: 1.0.1
@@ -1062,6 +1065,10 @@ packages:
     resolution: {integrity: sha512-uB80kBFb/tfd68bVleG9T5GGsGPjJrLAUpR5PZIrhBnIaRTQRjqdJSsIKkOP6OAIFbj7GOrcudc5pNjZ+geV2g==}
     engines: {node: '>=6'}
 
+  pkg-pr-new@0.0.71:
+    resolution: {integrity: sha512-Ln7I7NaOXN6CjBLVrNqsWOo6mIaNW4chH4eCR2t4tnQSmYtyQiWCqlMG6bL2JYCT1MOiKEiDObnnzePGh0TNFQ==}
+    hasBin: true
+
   possible-typed-array-names@1.1.0:
     resolution: {integrity: sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==}
     engines: {node: '>= 0.4'}
@@ -2358,6 +2365,8 @@ snapshots:
 
   pify@4.0.1: {}
 
+  pkg-pr-new@0.0.71: {}
+
   possible-typed-array-names@1.1.0: {}
 
   prettier@2.8.8: {}