fix(ci): create TypeScript SDK release tag directly

[ximt]

Summary

• Create the TypeScript SDK release tag ref directly from the merge commit SHA.
• Keep idempotency and release verification compatible with lightweight and legacy annotated tags.

Validation

• actionlint .github/workflows/publish-typescript-sdk.yml
• git diff --check

Tracking

• PREDICT-9229
• Addresses the Reference update failed error from release workflow run 35877384408.

[linear-code]

PREDICT-9229

[sdlc-pr-bot]

Change Control Evidence Check

Authorization — ✅ Pass

Evidence:

• Linear ticket: PREDICT-9229
• Change owner: Jimmy Huang
• Type of change: Normal

Testing — ✅ Pass

Evidence:

• Tests from CI checks: ➖ No tests ran
• Security scans: ✅ Passed
• Testing summary: ✅ Found in PR description
  • Summary: Two linting checks were performed: actionlint was run on the GitHub Actions workflow file publish-typescript-sdk.yml, and git diff was executed to check for trailing whitespace and other formatting issues. The notes do not indicate the outcome of these tests.
• Evidence link: View run

Approval — ⏳ Awaiting approval

Evidence:
(no approvers yet)

Segregation of Duties — ⏳ Awaiting approval

Validated:

• PR author: Jimmy Huang

---

Last checked: 2026-09-25 17:28 UTC

[nostradamus-bot]

Nostradamus Risk Rating — Medium