release.yml

name: Publish Package

on:
    push:
        tags:
            - "v*"

permissions:
    id-token: write # Required for OIDC
    contents: write # Required for publishing GitHub Release

jobs:
    release:
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v5

            # Uses NPM Trusted Publishers for access to the registry
            # See https://docs.npmjs.com/trusted-publishers
            - uses: actions/setup-node@v4
              with:
                  node-version-file: .node-version
                  registry-url: https://registry.npmjs.org

            # Ensure npm 11.5.1 or later is installed
            - name: Update npm
              run: npm install -g npm@11.6.1

            - name: Install
              run: npm ci

            - name: Build
              run: npm run build

            - name: Test
              run: npm test

            - name: Publish
              run: npm publish --provenance --access public --dry-run=${{ inputs.dryRun && 'true' || 'false' }}

            - name: GitHub Release
              if: ${{ ! inputs.dryRun }}
              uses: ncipollo/release-action@v1.20.0
              with:
                  generateReleaseNotes: true
                  makeLatest: true
                  token: ${{ secrets.GITHUB_TOKEN }}

            - name: Publish (internal)
              env:
                  NPM_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
              run: |
                  npm config set "//npm.pkg.github.com/:_authToken=${NPM_PUBLISH_TOKEN}"
                  npm publish --provenance --access public --dry-run=${{ inputs.dryRun && 'true' || 'false' }} --registry=https://npm.pkg.github.com/