fix(ci): pin npm 11 via proto for OIDC trusted publishing #28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - beta | |
| concurrency: ${{ github.workflow }}-${{ github.ref }} | |
| jobs: | |
| release: | |
| name: Release | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| id-token: write | |
| pull-requests: write | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - uses: moonrepo/setup-toolchain@v0.6.2 | |
| with: | |
| auto-install: true | |
| - run: moon setup | |
| - run: moon ci | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Validate publishing prerequisites | |
| uses: GarthDB/changesets-publish-validator@v1 | |
| with: | |
| auth-method: oidc | |
| - name: Publish | |
| id: changesets | |
| uses: changesets/action@v1.7.0 | |
| with: | |
| commit: 'chore: release' | |
| publish: pnpm release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |