From 6d55f51fa76759e265c2d72871220f450998175e Mon Sep 17 00:00:00 2001
From: Ryan Dew <146854757+rjdew-progress@users.noreply.github.com>
Date: Wed, 9 Sep 2026 13:16:45 -0700
Subject: [PATCH] MLE-31583 explicitly run prepublishOnly to generate SBOM

---
 .github/workflows/npm-publish-packages.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/npm-publish-packages.yml b/.github/workflows/npm-publish-packages.yml
index 49196310..1e81c582 100644
--- a/.github/workflows/npm-publish-packages.yml
+++ b/.github/workflows/npm-publish-packages.yml
@@ -7,6 +7,11 @@ on:
   release:
     types: [published]
   workflow_dispatch:
+    inputs:
+      publish:
+        description: 'Set to true to publish to npm'
+        required: true
+        type: boolean
 permissions:
   id-token: write # Required for OIDC
   contents: read
@@ -24,5 +29,6 @@ jobs:
       - run: npm ci
       - run: npm run build --if-present
       - run: npm run test:types
+      - run: npm run prepublishOnly
       # TODO: Create a way to run non-integration tests that don't rely on a MarkLogic Server instance
       - run: npm publish --registry=https://registry.npmjs.org  # Or: npm stage publish