chore(infra): enable npm trusted publishing and refactor release pipeline (#19)

Author: SoonIter

.github/workflows/release.yml

@@ -1,76 +1,47 @@
-name: Release Full
+# This action will publish the package to npm and create a GitHub release.
+name: Release
 
 on:
-  workflow_dispatch:
-    inputs:
-      version:
-        type: choice
-        description: "Release Version Type"
-        required: true
-        default: "patch"
-        options:
-          - major
-          - premajor
-          - minor
-          - preminor
-          - patch
-          - prepatch
-          - prerelease
-
-      tag:
-        type: choice
-        description: "Release Npm Tag"
-        required: true
-        default: "latest"
-        options:
-          - canary
-          - nightly
-          - latest
-          - beta
-          - alpha
+  # Run `npm run bump` to bump the version and create a git tag.
+  push:
+    tags:
+      - 'v*'
 
-      dry_run:
-        type: boolean
-        description: "DryRun release"
-        required: true
-        default: false
+  workflow_dispatch:
 
 permissions:
-  # To publish packages with provenance
+  contents: write
   id-token: write
 
 jobs:
-  release:
-    name: Release
-    permissions:
-      contents: write
-      # To publish packages with provenance
-      id-token: write
+  publish:
     runs-on: ubuntu-latest
-
+    environment: npm
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install Pnpm
-        run: corepack enable
-
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
-          cache: "pnpm"
+          node-version: 22
+
+      - name: Setup Package Managers
+        run: |
+          npm install -g npm@latest
+          npm --version
+          npm install -g corepack@latest --force
+          corepack enable
 
       - name: Install Dependencies
         run: pnpm install
 
-      - name: Run Test
-        run: pnpm run test
+      - name: Publish
+        uses: JS-DevTools/npm-publish@v3
+        with:
+          token: empty
 
-      - name: Try release to npm
-        run: pnpm run release
-        env:
-          DRY_RUN: ${{ inputs.dry_run }}
-          TAG: ${{ inputs.tag }}
-          VERSION: ${{ inputs.version }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - name: Create GitHub Release
+        uses: ncipollo/release-action@v1
+        with:
+          generateReleaseNotes: 'true'

package.json

@@ -2,7 +2,7 @@
   "name": "path-serializer",
   "version": "0.5.0",
   "description": "path-serializer",
-  "keywords": ["snapshot", "vitest", "jest", "ci", "test"],
+  "keywords": ["snapshot", "rstest", "vitest", "jest", "ci", "test"],
   "repository": {
     "type": "git",
     "url": "https://github.com/rspack-contrib/path-serializer.git"
@@ -29,7 +29,7 @@
     "test:watch": "vitest",
     "test": "vitest run",
     "prepublish": "pnpm run build",
-    "release": "node ./scripts/release.mjs"
+    "bump": "npx bumpp"
   },
   "simple-git-hooks": {
     "pre-commit": "npx nano-staged"