ci: harden workflows and cancel in-progress workflows whenever new ch… #244

	name: Release
	on:
	push:
	branches:
	- main

	# Restrict jobs in this workflow to have no permissions by default; permissions
	# should be granted per job as needed using a dedicated `permissions` block
	permissions: {}

	env:
	# reduces noise from npm post-install scripts
	DISABLE_OPENCOLLECTIVE: true
	OPEN_SOURCE_CONTRIBUTOR: true

	jobs:
	release:
	permissions:
	contents: write # to be able to publish a GitHub release
	issues: write # to be able to comment on released issues
	pull-requests: write # to be able to comment on released pull requests
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version: 20.x
	cache: npm

	- name: install
	run: npm ci
	- name: lint
	run: npm run lint
	- name: typecheck
	run: npm run typecheck
	- name: test
	run: npm run test

	- name: release
	run: npm run release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

Provide feedback