chore(release): configure github trusted publishing #25
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| concurrency: | |
| group: release-${{ github.ref }} | |
| cancel-in-progress: false | |
| permissions: | |
| contents: write | |
| id-token: write | |
| pull-requests: write | |
| jobs: | |
| release: | |
| name: Version or publish npm bundles | |
| runs-on: macos-15 | |
| environment: npm-release | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v5 | |
| - name: Setup Node for npm trusted publishing | |
| uses: actions/setup-node@v5 | |
| with: | |
| node-version: "24" | |
| registry-url: "https://registry.npmjs.org" | |
| - name: Setup Bun | |
| uses: oven-sh/setup-bun@v2 | |
| with: | |
| bun-version: "1.3.14" | |
| - name: Verify release toolchain | |
| run: | | |
| node --version | |
| npm --version | |
| bun --version | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Release preflight | |
| run: bun run release:preflight --skip-install | |
| - name: Create version PR or publish | |
| id: changesets | |
| uses: changesets/action@v1 | |
| with: | |
| version: bun run version-packages | |
| publish: bun run release-packages | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Verify published npm bundles | |
| if: steps.changesets.outputs.published == 'true' | |
| run: bun run release:verify-published |