[PyPranav]

• Publish Chrome extension updates from extension-v* tags and release version 1.0.1 independently of both npm packages.
• Reject mismatched tags, commits outside trunk, equal or older store versions, and modified release artifacts before uploading or submitting for review.
• Authenticate with the existing service account JSON secret and provide a read-only store-access check, verified against the live extension in GitHub Actions.
• Add a manual action that cancels only the requested pending version and shares the publishing lock to prevent overlapping store operations.
• Document setup, releases, and agent-friendly GitHub CLI commands for cancellation and checking results; actual uploads, submissions, and cancellations have not been exercised against Google.

[github-actions]

Vercel preview

View deployment

Commit: e18ddc2c4c5b9d0103e8a915811ed57e69711af0

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[tomasTDP]

Reviewed the release guards, service-account authentication, artifact integrity checks, version gating, cancellation flow, and CI results. The publish path is restricted to matching extension tags from trunk, store operations are serialized, and the live read-only access check passed. Approved.