dist

chore(ci): harden #57

	# `dist/index.js` is a special file in Actions. When you reference an action
	# with `uses:` in a workflow,`index.js` is the code that will run. For our
	# project, we generate this file through a build process from other source
	# files. We need to make sure the checked-in `index.js` actually matches what
	# we expect it to be.

	name: dist

	on:
	push:
	branches:
	- main
	paths-ignore:
	- '**.md'
	pull_request:
	paths-ignore:
	- '**.md'
	workflow_dispatch:

	jobs:
	check-dist:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false

	- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
	with:
	node-version: 16.x

	- run: \|
	npm ci
	npm run prepare

	- id: diff
	run: \|
	if [ "$(git diff --ignore-space-at-eol dist/ \| wc -l)" -gt "0" ]; then
	echo "Detected uncommitted changes after build. See status below:"
	git diff
	exit 1
	fi

	# If index.js was different than expected, upload the expected version as an artifact
	- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	if: ${{ failure() && steps.diff.conclusion == 'failure' }}
	with:
	name: dist
	path: dist/

Provide feedback