| name: release-please |
| |
| on: |
| push: |
| branches: |
| - main |
| workflow_dispatch: |
| |
| permissions: |
| id-token: write # Required for OIDC |
| contents: read |
| |
| jobs: |
| release-please: |
| runs-on: ubuntu-latest |
| outputs: |
| release_created: ${{ steps.release.outputs.release_created }} |
| permissions: |
| contents: write |
| pull-requests: write |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 |
| with: |
| egress-policy: audit |
| |
| - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4.4.0 |
| id: release |
| with: |
| config-file: release-please-config.json |
| manifest-file: .release-please-manifest.json |
| |
| npm-publish: |
| needs: release-please |
| if: ${{ needs.release-please.outputs.release_created }} |
| runs-on: ubuntu-latest |
| permissions: |
| contents: read |
| id-token: write |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 |
| with: |
| egress-policy: audit |
| |
| - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 |
| - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 |
| with: |
| node-version: 24 # npm >= 11.5.1 |
| registry-url: 'https://registry.npmjs.org' |
| - run: npm publish --provenance --access public |
