v25.0.0-pre3 #46
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish npm packages | |
| on: | |
| release: | |
| types: [published] | |
| concurrency: | |
| group: npm-release-${{ github.event.release.tag_name }} | |
| cancel-in-progress: false | |
| jobs: | |
| publish-npm: | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| # Required for npm Trusted Publishing (OIDC): npm mints | |
| # short-lived, per-run credentials from this token instead | |
| # of a long-lived NPM_TOKEN, and attaches provenance. | |
| id-token: write | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: ./.github/workflows/setup | |
| # Trusted Publishing requires npm >= 11.5.1; the pinned Node | |
| # runtime ships an older npm, so upgrade it before publishing. | |
| # Pinned to major 11: npm@latest moved to 12.0.0, which requires | |
| # Node ^22.22.2 || ^24.15.0 || >=26 and EBADENGINEs on our pinned | |
| # Node (.nvmrc), breaking every publish. | |
| - run: npm install -g npm@11 | |
| - name: Validate release version | |
| env: | |
| GITHUB_RELEASE_ID: ${{ github.event.release.id }} | |
| GITHUB_REPOSITORY: ${{ github.repository }} | |
| GITHUB_TOKEN: ${{ github.token }} | |
| RELEASE_TAG: ${{ github.event.release.tag_name }} | |
| run: | | |
| RELEASE_VERSION=$(./node_modules/.bin/tsx script/release-version.ts validate "$RELEASE_TAG") | |
| echo "RELEASE_VERSION=$RELEASE_VERSION" >> "$GITHUB_ENV" | |
| # Run via npm so node_modules/.bin is on PATH for the release | |
| # helper's tsx shebang. | |
| - run: npm run pub:npm |