| name: release-please |
| |
| on: |
| push: |
| branches: |
| - main |
| workflow_dispatch: |
| |
| jobs: |
| release-please: |
| runs-on: ubuntu-latest |
| outputs: |
| release_created: ${{ steps.release.outputs.release_created }} |
| permissions: |
| contents: write |
| pull-requests: write |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0 |
| with: |
| egress-policy: audit |
| |
| - uses: googleapis/release-please-action@d1a8f221d7723166f48a584aebba00ef3f6febec # v4.1.4 |
| id: release |
| with: |
| config-file: release-please-config.json |
| manifest-file: .release-please-manifest.json |
| |
| npm-publish: |
| needs: release-please |
| if: ${{ needs.release-please.outputs.release_created }} |
| runs-on: ubuntu-latest |
| permissions: |
| contents: read |
| id-token: write |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0 |
| with: |
| egress-policy: audit |
| |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 |
| - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0 |
| with: |
| node-version: lts/* |
| registry-url: 'https://registry.npmjs.org' |
| - run: npm publish --provenance --access public |
| env: |
| NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} |
