project: add CDN deployment workflow

Deploy core ESM and UMD bundles to prod-cdn.ably.com on every
GitHub release. Uses AWS OIDC federation for authentication.
Versioned copies are uploaded (e.g. 0.0.2 -> 0, 0.0, 0.0.2)
so consumers can pin to major/minor/patch.

Author: VeskeR

.github/workflows/publish.cdn.yml

@@ -0,0 +1,29 @@
+name: Publish to CDN
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    # These permissions are necessary to run the configure-aws-credentials action
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: us-east-1
+          role-to-assume: arn:aws:iam::${{ secrets.ABLY_AWS_ACCOUNT_ID_SDK }}:role/prod-ably-sdk-cdn
+          role-session-name: ${{ github.run_id }}-${{ github.run_number }}
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci
+      - run: node scripts/cdn_deploy.js --skipCheckout --tag=${{ github.ref_name }}

package-lock.json

@@ -102,6 +102,7 @@
     "@typescript-eslint/eslint-plugin": "^8.26.1",
     "@typescript-eslint/parser": "^8.26.1",
     "ai": "^6.0.137",
+    "aws-sdk": "^2.1692.0",
     "eslint": "^9.31.0",
     "eslint-plugin-import": "^2.31.0",
     "eslint-plugin-jsdoc": "^60.7.0",
@@ -112,6 +113,7 @@
     "globals": "^16.0.0",
     "jiti": "^2.6.1",
     "jsdom": "^29.0.1",
+    "minimist": "^1.2.8",
     "prettier": "^3.5.3",
     "tsx": "^4.21.0",
     "typescript": "^5.8.2",