chore: add release safeguard for major releases

Author: hassiebp

.github/workflows/release.yml

@@ -22,9 +22,13 @@ on:
           - beta
           - rc
       prerelease_increment:
-        description: 'Pre-release number (e.g., 1 for alpha1). Leave empty to auto-increment or start at 1.'
+        description: "Pre-release number (e.g., 1 for alpha1). Leave empty to auto-increment or start at 1."
         type: string
         default: ""
+      confirm_major:
+        description: "Type RELEASE MAJOR to confirm a major release"
+        required: false
+        default: ""
 
 permissions:
   contents: write
@@ -47,6 +51,14 @@ jobs:
             exit 1
           fi
 
+      - name: Confirm major release
+        if: ${{ inputs.version == 'major' && inputs.dry_run == false }}
+        run: |
+          if [ "${{ inputs.confirm_major }}" != "RELEASE MAJOR" ]; then
+            echo "❌ For major releases, set confirm_major to RELEASE MAJOR"
+            exit 1
+          fi
+
       - name: Checkout repository
         uses: actions/checkout@v4
         with: