chore: bump all packages to 2.0.0 and add npm publish workflow

- Bump core and react to 2.0.0 to match the JS SDK
- Add publishConfig with access: public and provenance: true
- Add repository, homepage, bugs, keywords to all packages
- Add files field to JS package to limit published contents
- Add publish.yml workflow using OIDC trusted publishing

Author: felipefdl

.github/workflows/publish.yml

@@ -0,0 +1,37 @@
+name: Publish to npm
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  publish:
+    name: Publish
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Build
+        run: pnpm build
+
+      - name: Test
+        run: pnpm vp test run
+
+      - name: Publish packages
+        run: pnpm -r publish --access public --no-git-checks
+        env:
+          NPM_CONFIG_PROVENANCE: true

packages/core/package.json

@@ -1,10 +1,24 @@
 {
   "name": "@tago-io/custom-widget-core",
-  "version": "0.1.0",
+  "version": "2.0.0",
   "description": "Framework-agnostic core for TagoIO Custom Widget SDKs",
+  "keywords": [
+    "custom-widget",
+    "dashboard",
+    "iot",
+    "tago",
+    "tagoio",
+    "widget"
+  ],
+  "homepage": "https://github.com/tago-io/custom-widget#readme",
+  "bugs": "https://github.com/tago-io/custom-widget/issues",
   "license": "Apache-2.0",
   "author": "Tago LLC",
-  "repository": "tago-io/custom-widget",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tago-io/custom-widget.git",
+    "directory": "packages/core"
+  },
   "files": [
     "dist"
   ],
@@ -25,6 +39,10 @@
       }
     }
   },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "scripts": {
     "build": "tsup",
     "test": "vp test run",

packages/js/package.json

@@ -2,11 +2,33 @@
   "name": "@tago-io/custom-widget",
   "version": "2.0.0",
   "description": "TagoIO Toolkit to build your own widgets",
+  "keywords": [
+    "custom-widget",
+    "dashboard",
+    "iot",
+    "javascript",
+    "tago",
+    "tagoio",
+    "widget"
+  ],
+  "homepage": "https://github.com/tago-io/custom-widget#readme",
+  "bugs": "https://github.com/tago-io/custom-widget/issues",
   "license": "Apache-2.0",
   "author": "Tago LLC",
-  "repository": "tago-io/custom-widget",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tago-io/custom-widget.git",
+    "directory": "packages/js"
+  },
+  "files": [
+    "dist"
+  ],
   "type": "module",
   "main": "./dist/custom-widget.js",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "scripts": {
     "build:scripts": "tsup",
     "build:css": "lessc ./src/css/custom-widget.less ./dist/custom-widget.css",

packages/react/package.json

@@ -1,10 +1,26 @@
 {
   "name": "@tago-io/custom-widget-react",
-  "version": "0.1.0",
+  "version": "2.0.0",
   "description": "React SDK for TagoIO Custom Widgets",
+  "keywords": [
+    "custom-widget",
+    "dashboard",
+    "hooks",
+    "iot",
+    "react",
+    "tago",
+    "tagoio",
+    "widget"
+  ],
+  "homepage": "https://github.com/tago-io/custom-widget#readme",
+  "bugs": "https://github.com/tago-io/custom-widget/issues",
   "license": "Apache-2.0",
   "author": "Tago LLC",
-  "repository": "tago-io/custom-widget",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tago-io/custom-widget.git",
+    "directory": "packages/react"
+  },
   "files": [
     "dist"
   ],
@@ -25,6 +41,10 @@
       }
     }
   },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "scripts": {
     "build": "tsup",
     "test": "vp test run",