chore(repo): check valid release authors for latest (#22127)

(cherry picked from commit 80ae397)

scripts/nx-release.ts

@@ -129,6 +129,17 @@ const VALID_AUTHORS_FOR_LATEST = [
  });
 
  const distTag = determineDistTag(options.version);
+ if (!distTag || distTag === 'latest') {
+ // We are only expecting latest releases to be performed within publish.yml on GitHub
+ const author = process.env.GITHUB_ACTOR ?? '';
+ if (!VALID_AUTHORS_FOR_LATEST.includes(author)) {
+ throw new Error(
+ `The GitHub user "${author}" is not allowed to publish to "latest". Please request one of the following users to carry out the release: ${VALID_AUTHORS_FOR_LATEST.join(
+ ', '
+ )}`
+ );
+ }
+ }
 
  if (options.dryRun) {
  console.warn('Not Publishing because --dryRun was passed');