Bump actions/setup-node from 6 to 7 #112

	name: CI

	on:
	push:
	branches: [main]
	tags: ['v*']
	pull_request:

	jobs:
	build-and-smoke:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7

	- name: Build and smoke test in Docker
	run: \|
	docker build -t nacho-tools-ci -f ci/Dockerfile .
	mkdir -p out
	docker run --rm -v "$PWD/out:/work/out" nacho-tools-ci

	- uses: actions/upload-artifact@v7
	with:
	name: tarball
	path: out/*.tgz
	if-no-files-found: error

	smoke-windows:
	runs-on: windows-latest
	steps:
	- uses: actions/checkout@v7

	- uses: actions/setup-node@v7
	with:
	node-version: 22

	# Git Bash ships with windows-latest runners and handles the smoke scripts.
	- name: Build and smoke test
	shell: bash
	run: \|
	npm ci
	ci/smoke.sh

	publish:
	needs: [build-and-smoke, smoke-windows]
	if: startsWith(github.ref, 'refs/tags/v')
	runs-on: ubuntu-latest
	permissions:
	contents: read
	# Required for npm package provenance (OIDC token).
	id-token: write
	steps:
	- uses: actions/download-artifact@v8
	with:
	name: tarball
	path: out

	# Node 24 ships with npm 11.x, which is required for OIDC-based trusted
	# publishing. (The node version used by the build lives in the Dockerfile
	# and is independent of this.)
	- uses: actions/setup-node@v7
	with:
	node-version: 24
	registry-url: https://registry.npmjs.org

	- name: Publish to npm with provenance
	run: npm publish --provenance --access public ./out/*.tgz

Navigation Menu