fix(ci): bump the version of the @prompt-registry/collection-scripts and improving the package publication flow (#188)

Co-authored-by: Waldek Herka <waldek.herka@no.reply>

Author: wherka-ama

.github/workflows/lib-collection-scripts-ci.yml

@@ -2,15 +2,19 @@ name: Collection Scripts Library CI
 
 on:
   push:
-    branches: [main, develop]
+    branches: [main]
     paths:
       - "lib/**"
   pull_request:
-    branches: [main, develop]
+    branches: [main]
     paths:
       - "lib/**"
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
 env:
   NODE_VERSION: "20"
 
@@ -86,15 +90,10 @@ jobs:
           # Check if this version tag already exists
           if git tag -l "collection-scripts-v$PACKAGE_VERSION" | grep -q .; then
             echo "exists=true" >> $GITHUB_OUTPUT
+            echo "Version $PACKAGE_VERSION already published"
           else
             echo "exists=false" >> $GITHUB_OUTPUT
           fi
-
-      - name: Publish package
-        if: steps.version-check.outputs.exists == 'false'
-        run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Create version tag
         if: steps.version-check.outputs.exists == 'false'
         run: |
@@ -104,8 +103,10 @@ jobs:
           git push origin "collection-scripts-v${{ steps.version-check.outputs.version }}"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Skip publish (version exists)
-        if: steps.version-check.outputs.exists == 'true'
+      - name: Publish package
+        if: steps.version-check.outputs.exists == 'false'
+        run: npm publish --provenance --access public
+      - name: Push the tag
+        if: steps.version-check.outputs.exists == 'false'
         run: |
-          echo "Version ${{ steps.version-check.outputs.version }} already published, skipping."
+          git push origin "collection-scripts-v${{ steps.version-check.outputs.version }}"

lib/README.md

@@ -126,6 +126,15 @@ npm run build
 npm test
 ```
 
+### Releasing
+
+The package is configured to use provenance signing for npm publish. Make sure to set up OIDC authentication if publishing to npm.
+The version is taken from the package.json file. Therefore it is important to bump the version before publishing 
+
+```bash
+npm version <patch|minor|major>
+```
+
 ## License
 
-MIT
+Apache License Version 2.0

lib/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@prompt-registry/collection-scripts",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "description": "Shared scripts for building, validating, and publishing Copilot prompt collections",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",