From d3e221b43878d36f4dffd4578d689d9ca7441545 Mon Sep 17 00:00:00 2001
From: YG Park <ygpark80@gmail.com>
Date: Wed, 5 Aug 2026 14:16:19 +0900
Subject: [PATCH] fix: allow gh2 postinstall in release verification

---
 .github/workflows/release.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ac88183..9eb4fed 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -206,6 +206,8 @@ jobs:
       - name: Verify npm installation
         shell: bash
         run: |
+          mkdir -p "$RUNNER_TEMP/npm"
+          printf '%s\n' '{"private":true,"allowScripts":{"@circlesac/gh2":true}}' > "$RUNNER_TEMP/npm/package.json"
           for attempt in {1..10}; do
             if npm install --prefix "$RUNNER_TEMP/npm" "@circlesac/gh2@$VERSION"; then
               break