| name: release-please |
| |
| on: |
| push: |
| branches: |
| - main |
| workflow_dispatch: |
| |
| jobs: |
| release-please: |
| runs-on: ubuntu-latest |
| outputs: |
| release_created: ${{ steps.release.outputs.release_created }} |
| permissions: |
| contents: write |
| pull-requests: write |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 |
| with: |
| egress-policy: audit |
| |
| - uses: googleapis/release-please-action@7987652d64b4581673a76e33ad5e98e3dd56832f # v4.1.3 |
| id: release |
| with: |
| config-file: release-please-config.json |
| manifest-file: .release-please-manifest.json |
| |
| npm-publish: |
| needs: release-please |
| if: ${{ needs.release-please.outputs.release_created }} |
| runs-on: ubuntu-latest |
| permissions: |
| contents: read |
| id-token: write |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 |
| with: |
| egress-policy: audit |
| |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 |
| - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 |
| with: |
| node-version: lts/* |
| registry-url: 'https://registry.npmjs.org' |
| - run: npm publish --provenance --access public |
| env: |
| NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} |
