From f7fad565a28cb6b794e2e3dd18c652fcfb70f63a Mon Sep 17 00:00:00 2001
From: Yiaany <ilyaantonievich@gmail.com>
Date: Tue, 1 Sep 2026 18:10:19 +0500
Subject: [PATCH] fix(release): make gitHead verification optional for
 tarball-published artifacts

---
 scripts/verify-published.mjs | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/scripts/verify-published.mjs b/scripts/verify-published.mjs
index 9b70e16..e3c2315 100644
--- a/scripts/verify-published.mjs
+++ b/scripts/verify-published.mjs
@@ -14,10 +14,12 @@ for (let attempt = 1; attempt <= 6; attempt += 1) {
         encoding: "utf8",
       }),
     );
-    if (metadata.version !== packageJson.version)
+    if (metadata.version !== packageJson.version) {
       throw new Error(`registry version is ${metadata.version}`);
-    if (metadata.gitHead !== expectedSha)
-      throw new Error(`registry gitHead is ${metadata.gitHead ?? "missing"}`);
+    }
+    if (metadata.gitHead && metadata.gitHead !== expectedSha) {
+      throw new Error(`registry gitHead is ${metadata.gitHead}`);
+    }
     console.log(`Verified ${spec} at ${expectedSha}.`);
     process.exit(0);
   } catch (error) {