| 123456789101112131415161718192021222324252627282930313233343536 |
- name: Release
- on:
- push:
- branches:
- - main # or main
- permissions:
- contents: read # for checkout
- jobs:
- release:
- name: Release
- runs-on: ubuntu-latest
- permissions:
- contents: write # to be able to publish a GitHub release
- issues: write # to be able to comment on released issues
- pull-requests: write # to be able to comment on released pull requests
- id-token: write # to enable use of OIDC for npm provenance
- steps:
- - name: Checkout
- uses: actions/checkout@v4
- with:
- fetch-depth: 0
- - name: Setup Node.js
- uses: actions/setup-node@v4
- with:
- node-version: "lts/*"
- - name: Install dependencies
- run: npm clean-install
- - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
- run: npm audit signatures
- - name: Release
- env:
- GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
- run: npx semantic-release
|