release.yml

# author: elliot-huffman
name: release
on:
  push:
    tags:
      - "*"

jobs:
  publish:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: none
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v6
        with:
          node-version: 24.x
          registry-url: https://registry.npmjs.org/
      - uses: pnpm/action-setup@v4
      - run: pnpm install --frozen-lockfile

      - name: Sync README.md
        run: pnpm sync-readme

      - name: Publish to NPM
        # we need -no-git-checks to avoid git errors https://github.com/pnpm/pnpm/issues/5894
        run: pnpm package:latest --no-git-checks --provenance --access public
        env:
          NPM_CONFIG_PROVENANCE: true # Enable provenance

  release:
    runs-on: ubuntu-latest
    needs: publish
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          fetch-depth: 0
      - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
      - run: pnpm dlx changelogithub
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}