5.9.2 #2

	name: Publish to npm

	on:
	push:
	tags:
	- 'v*'

	permissions:
	contents: write # needed to create the GitHub release
	id-token: write # needed for npm trusted publishing (OIDC)

	jobs:
	publish:
	runs-on: ubuntu-latest
	# If you set an "Environment name" on the npm trusted publisher page,
	# uncomment the line below and use the same name. This lets you add a
	# required-reviewer gate in repo Settings > Environments if you want
	# one last manual "approve" click before publish actually runs.
	environment: npm-publish

	steps:
	- name: Checkout
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8

	- name: Setup Node
	uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
	with:
	node-version: 24
	registry-url: 'https://registry.npmjs.org'
	cache: 'npm'

	- name: Install dependencies
	run: npm ci

	- name: Type check
	run: npm run typecheck --if-present

	- name: Run tests
	run: npm test --if-present

	- name: Build
	run: npm run build --if-present

	- name: Publish to npm
	run: npm publish

	- name: Create GitHub Release
	uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda
	with:
	generate_release_notes: true

Provide feedback