[haseebahmed248]

Summary

The GitHub release job runs without a checkout, so gh release create cannot infer the repository. Set GH_REPO from the workflow context so it can create the matching prerelease after npm publication.

Related issue

Closes #33

Changes

• Add GH_REPO: ${{ github.repository }} to the release-notes step. No other workflow changes.

Validation

• npm run test:release — all 4 tests passed.
• git diff --check — passed.
• From an empty directory outside the checkout, gh release view v0.1.0-alpha.1 --json tagName,url failed with “not a git repository”.
• The same read-only command with GH_REPO=haseebahmed248/GuardStep succeeded and returned the expected release URL.
• Application type, generated-contract and runtime tests were not rerun locally for this one-line workflow change; CI runs those checks.
• No release was created and nothing was published. Live release creation remains to be verified during the next approved release.

Risk and compatibility

• Security or permission effects: none. Existing job permissions and token scope are unchanged; the repository comes from GitHub context.
• Compatibility or breaking changes: none. Tag verification, generated notes, prerelease status and the dependency on successful npm publication are unchanged.

Checklist

• This change is focused on one issue.
• Behavioral changes are verified with the read-only reproduction above.
• No CLI or language documentation changes are needed.
• No generated files are changed.
• No credentials, private data, or unredacted model output are included.
• The commit includes the required DCO Signed-off-by line.