publish.yml

name: Release package

on:
    push:
        tags:
            - 'v*'
    workflow_dispatch:

permissions:
    # Enable reading repository contents (allows checkout without token)
    contents: read
    # Enable the use of OIDC for trusted publishing and npm provenance
    id-token: write

jobs:
    publish:
        runs-on: ubuntu-latest
        timeout-minutes: 31
        steps:
            - name: Git checkout
              uses: actions/checkout@v4

            - name: Configure doist package repository
              uses: actions/setup-node@v4
              with:
                  node-version-file: .nvmrc
                  scope: '@doist'
                  registry-url: 'https://registry.npmjs.org/'

            - name: Ensure npm 11.5.1 or later is installed
              run: npm install -g npm@latest

            - name: Install dependencies
              run: npm ci

            - name: Publish package
              run: npm publish --provenance --access public