Merge pull request #57 from authorizerdev/fix/ci-safe-npm-publish #4

	name: Release

	on:
	push:
	tags:
	- "v..*"

	jobs:
	release:
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: "20"
	registry-url: "https://registry.npmjs.org"

	- name: Install dependencies
	run: make install

	- name: Build
	run: make build

	- name: Publish to npm
	# Publish directly here. The Makefile publish-rc/publish targets
	# are interactive (confirm prompt) and re-do the commit/tag/push —
	# correct for a human running the whole release locally, but they
	# hang/cancel in CI, which fires AFTER the tag already exists.
	run: \|
	if [[ "${GITHUB_REF_NAME}" == -rc. ]]; then
	npm publish --tag rc --access public
	elif [[ "${GITHUB_REF_NAME}" == -beta. ]]; then
	npm publish --tag beta --access public
	else
	npm publish --access public
	fi
	env:
	NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

	- name: Create GitHub Release
	run: \|
	gh release create "${{ github.ref_name }}" \
	--title "${{ github.ref_name }}" \
	--generate-notes
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback