From 83756afdf8c5e8ec5a7427279fac1fc156d8a443 Mon Sep 17 00:00:00 2001
From: Travis Beauvais <tbeauvais@mozilla.com>
Date: Wed, 12 Nov 2025 13:42:17 -0800
Subject: [PATCH] Add workflow deps & fix attestation conflict

---
 .github/workflows/publish.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c7af776..cda27b8 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -9,7 +9,22 @@ permissions:
   contents: read
 
 jobs:
+  # Run lint checks - MUST PASS before publishing
+  lint:
+    name: Lint Check
+    uses: ./.github/workflows/lint.yml
+    permissions:
+      contents: read
+
+  # Run tests on all supported Node versions - MUST PASS before publishing
+  test:
+    name: Test Check
+    uses: ./.github/workflows/test.yml
+    permissions:
+      contents: read
+
   publish:
+    needs: [lint, test]
     runs-on: ubuntu-latest
     permissions:
       id-token: write  # Required for trusted publishing to PyPI
@@ -67,6 +82,7 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           repository-url: https://test.pypi.org/legacy/
+          attestations: false
 
       - name: Verify TestPyPI installation
         run: |