fix: materialize workspace dependencies before npm publish

[owjs3901]

Summary

• run Bun pack for every public workspace package so workspace protocol ranges become concrete npm ranges
• pass the packed tarball directly to npm publish, preserving the existing npm OIDC trusted-publishing and provenance flow
• reject CI preflight tarballs that still contain workspace protocol ranges
• add patch changepacks for all 11 public packages

Root cause

The prior trusted-publishing migration invoked npm publish directly from each workspace directory. npm preserved Bun workspace protocol dependency ranges in registry metadata, causing consumer installs such as @devup-ui/components@0.1.52 to fail.

Verification

• direct bun pm pack then npm publish tarball --dry-run fixture succeeded
• all 11 package tarballs contain no workspace protocol ranges
• bun run build
• bun run lint
• bun run test (5135 Bun tests, Rust coverage suite)
• bun run verify:dist

[github-actions]

Changepacks

@devup-ui/wasm@1.0.77 → 1.0.78 - bindings/devup-ui-wasm/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/bun-plugin@1.0.14 → 1.0.15 - packages/bun-plugin/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/components@0.1.52 → 0.1.53 - packages/components/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/eslint-plugin@1.0.17 → 1.0.18 - packages/eslint-plugin/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/next-plugin@1.0.82 → 1.0.83 - packages/next-plugin/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/plugin-utils@1.0.12 → 1.0.13 - packages/plugin-utils/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/react@1.0.39 → 1.0.40 - packages/react/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/reset-css@1.0.26 → 1.0.27 - packages/reset-css/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/rsbuild-plugin@1.0.60 → 1.0.61 - packages/rsbuild-plugin/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/vite-plugin@1.0.66 → 1.0.67 - packages/vite-plugin/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

@devup-ui/webpack-plugin@1.0.65 → 1.0.66 - packages/webpack-plugin/package.json

Patch

• Publish all npm packages with materialized workspace dependency versions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.