Skip to content

🔨chore: migrate build from rollup to tsdown (rolldown) (#113) #89

🔨chore: migrate build from rollup to tsdown (rolldown) (#113)

🔨chore: migrate build from rollup to tsdown (rolldown) (#113) #89

Workflow file for this run

name: Release crypto-icons package
on:
push:
branches:
- main
paths:
- "lib/**"
workflow_dispatch:
permissions:
id-token: write
packages: write
contents: read
attestations: write
env:
NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ledgerlive-npm-prod-public
jobs:
publish:
runs-on: public-ledgerhq-shared-small
defaults:
run:
working-directory: ./lib/
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v2
with:
version: 9.6.0
- uses: actions/setup-node@v4
with:
node-version: 22
registry-url: https://registry.npmjs.org/
- name: Install dependencies
run: pnpm install --frozen-lockfile
- name: Build project
run: pnpm run build
- name: Attest for npmjs.com
id: attest
uses: LedgerHQ/actions-security/actions/attest-for-npmsjs-com@actions/attest-for-npmsjs-com-0.1.2
with:
subject-path: lib
package-manager: npm
- name: Sign tarball
uses: LedgerHQ/actions-security/actions/sign-blob@actions/sign-blob-1
with:
path: ${{ steps.attest.outputs.tarball-path }}
- name: Login to JFrog Ledger
id: jfrog-login
uses: LedgerHQ/actions-security/actions/jfrog-login@actions/jfrog-login-1
- name: Setup npm config for JFrog
env:
NPM_REGISTRY_TOKEN: ${{ steps.jfrog-login.outputs.oidc-token }}
run: |
cat << EOF | tee .npmrc
registry=https://${NPM_REGISTRY}/
//${NPM_REGISTRY}/:_authToken=${NPM_REGISTRY_TOKEN}
EOF
- name: Publish package to JFrog
run: pnpm publish "${{ steps.attest.outputs.tarball-path }}" --no-git-checks