release.yml

name: Release
on:
    push:
        branches:
            - master
jobs:
    release:
        name: Build and Release
        runs-on: ubuntu-latest
        permissions:
            contents: write
            issues: write
            pull-requests: write
            id-token: write
        steps:
            - name: Checkout
              uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
              with:
                  fetch-depth: 0
            - name: Setup Node.js
              uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
              with:
                  node-version: 20.x
            - name: Install Dependencies
              run: npm clean-install
            - name: >-
                  Verify The Integrity of Provenance Attestations and Registry
                  Signatures for Installed Dependencies
              run: npm audit signatures
            - name: Release
              env:
                  CI: true
                  GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
                  NPM_TOKEN: '${{ secrets.NPM_TOKEN }}'
              run: npx semantic-release