Skip to content

Semantic Release

Semantic Release #45

name: Semantic Release
on:
workflow_run:
workflows: ["Build"]
branches: ["main"]
types:
- completed
permissions:
contents: read # for checkout
jobs:
release:
if: github.event.workflow_run.conclusion == 'success'
name: Release
runs-on: ubuntu-latest
permissions:
contents: write # to be able to publish a GitHub release
issues: write # to be able to comment on released issues
pull-requests: write # to be able to comment on released pull requests
id-token: write # to enable use of OIDC for npm provenance
steps:
- name: Checkout
uses: actions/checkout@v3
with:
fetch-depth: 0
persist-credentials: false
- name: Setup Node.js
uses: actions/setup-node@v3
with:
node-version: "lts/*"
- name: Install dependencies
run: npm clean-install
- name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
run: npm audit signatures
- name: Release
env:
GITHUB_TOKEN: ${{ secrets.SEMANTIC_RELEASE_PAT }}
run: npx semantic-release