Stabilize CI and release workflows

Author: sorenbs

.github/workflows/ci.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   validate:
-    runs-on: ubuntu-latest
+    runs-on: macos-latest
 
     steps:
       - name: Checkout
@@ -47,3 +47,32 @@ jobs:
 
       - name: Local Conformance
         run: bun run test:conformance:local
+
+  linux-smoke:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.6
+
+      - name: Install Dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Typecheck
+        run: bun run typecheck
+
+      - name: Node Local Package Smoke
+        run: bun run test:node-local-package
+
+      - name: Bun Server Package Smoke
+        run: bun run test:bun-server-package

.github/workflows/release.yml

@@ -8,8 +8,8 @@ permissions:
   id-token: write
 
 jobs:
-  publish:
-    runs-on: ubuntu-latest
+  validate:
+    runs-on: macos-latest
 
     steps:
       - name: Checkout
@@ -19,7 +19,6 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 24
-          registry-url: https://registry.npmjs.org
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -43,6 +42,58 @@ jobs:
           bun run test:node-local-package
           bun run test:bun-server-package
 
+  linux-smoke:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.6
+
+      - name: Install Dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Typecheck
+        run: bun run typecheck
+
+      - name: Package Smoke Tests
+        run: |
+          bun run test:node-local-package
+          bun run test:bun-server-package
+
+  publish:
+    runs-on: macos-latest
+    needs:
+      - validate
+      - linux-smoke
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.6
+
+      - name: Install Dependencies
+        run: bun install --frozen-lockfile
+
       - name: Build Publishable Packages
         run: bun run build:npm-packages
 

docs/releasing.md

@@ -71,6 +71,10 @@ gh workflow run release.yml
 The GitHub workflow builds, validates, and publishes both packages with npm
 trusted publishing and provenance enabled.
 
+The workflow currently runs the full repository validation on `macos-latest`
+and package smoke checks on both macOS and Ubuntu. This keeps the release gate
+stable while still verifying that the published package shapes work on Linux.
+
 ## Build Notes
 
 The release pipeline is intentionally split: