| name: release-please |
| |
| on: |
| push: |
| branches: |
| - main |
| workflow_dispatch: |
| |
| permissions: |
| id-token: write # Required for OIDC |
| contents: read |
| |
| jobs: |
| release-please: |
| runs-on: ubuntu-latest |
| outputs: |
| release_created: ${{ steps.release.outputs.release_created }} |
| permissions: |
| contents: write |
| pull-requests: write |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 |
| with: |
| egress-policy: audit |
| |
| - uses: googleapis/release-please-action@c2a5a2bd6a758a0937f1ddb1e8950609867ed15c # v4.3.0 |
| id: release |
| with: |
| config-file: release-please-config.json |
| manifest-file: .release-please-manifest.json |
| |
| npm-publish: |
| needs: release-please |
| if: ${{ needs.release-please.outputs.release_created }} |
| runs-on: ubuntu-latest |
| permissions: |
| contents: read |
| id-token: write |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 |
| with: |
| egress-policy: audit |
| |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 |
| - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 |
| with: |
| node-version: 24 # npm >= 11.5.1 |
| registry-url: 'https://registry.npmjs.org' |
| - run: npm publish --provenance --access public |
