ci: release actions and pinning third party actions versions

Author: ilbertt

.github/workflows/codestyle.yml

@@ -10,16 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Setup PNPM
         uses: dfinity/ci-tools/actions/setup-pnpm@main
 
       - name: Check JS Codestyle
         run: pnpm codestyle:check
-
-      - name: Check Rust Linting
-        run: cargo clippy
-
-      - name: Check Rust formatting
-        run: cargo fmt -- --check

.github/workflows/create-release-pr.yml

@@ -0,0 +1,59 @@
+name: create_release_pr
+
+on:
+  workflow_dispatch:
+
+jobs:
+  create_release_pr:
+    name: create_release_pr
+    runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      contents: write
+    steps:
+      - name: Create GitHub App Token
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 #v2.1.4
+        id: generate_token
+        with:
+          app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
+          private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
+
+      - name: Checkout Code
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+
+      - name: Setup Python
+        uses: dfinity/ci-tools/actions/setup-python@main
+
+      - name: Setup Commitizen
+        uses: dfinity/ci-tools/actions/setup-commitizen@main
+
+      - name: Setup PNPM
+        uses: dfinity/ci-tools/actions/setup-pnpm@main
+
+      - name: Build package
+        run: pnpm build
+
+      - name: Bump version
+        id: bump_version
+        uses: dfinity/ci-tools/actions/bump-version@main
+        with:
+          major_version_zero: true
+
+      - name: Print Version
+        run: echo "Bumping to version ${{ steps.bump_version.outputs.version }}"
+
+      - name: Create Pull Request
+        uses: dfinity/ci-tools/actions/create-pr@main
+        with:
+          token: ${{ steps.generate_token.outputs.token }}
+          branch_name: 'release/${{ steps.bump_version.outputs.version }}'
+          pull_request_title: 'chore: release ${{ steps.bump_version.outputs.version }}'
+          pull_request_body: |
+            After merging this PR, tag the merge commit with:
+            ```shell
+            git tag ${{ steps.bump_version.outputs.version }}
+            git push origin ${{ steps.bump_version.outputs.version }}
+            ```
+          commit_message: 'chore: release ${{ steps.bump_version.outputs.version }}'

.github/workflows/release.yml

@@ -0,0 +1,49 @@
+name: release
+
+on:
+  push:
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+      - '[0-9]+.[0-9]+.[0-9]+b[0-9]+'
+
+jobs:
+  release:
+    name: release
+    runs-on: ubuntu-latest
+    environment:
+      name: release
+      url: https://www.npmjs.com/package/@dfinity/typedoc-plugin-icp-docs
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Setup Python
+        uses: dfinity/ci-tools/actions/setup-python@main
+
+      - name: Setup Commitizen
+        uses: dfinity/ci-tools/actions/setup-commitizen@main
+
+      - name: Setup PNPM
+        uses: dfinity/ci-tools/actions/setup-pnpm@main
+
+      - name: Build NPM package
+        run: pnpm build
+
+      - name: Generate release notes
+        uses: dfinity/ci-tools/actions/generate-release-notes@main
+
+      - name: Publish to npm
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
+          NPM_CONFIG_PROVENANCE: 'true'
+        run: |
+          pnpm publish --verbose --access public
+
+      - name: Create Github release
+        uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
+        with:
+          bodyFile: 'RELEASE_NOTES.md'
+          tag: '${{ github.ref_name }}'
+          commit: 'main'
+          prerelease: false
+          makeLatest: true

.github/workflows/test.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Setup PNPM
         uses: dfinity/ci-tools/actions/setup-pnpm@main