feat: update CI

Author: brynblack

.github/workflows/ci.yml

@@ -0,0 +1,19 @@
+name: "CI / Feature"
+
+on:
+  push:
+    branches:
+      - feature*
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  use-library-js-feature:
+    permissions:
+      contents: read
+      actions: write
+      checks: write
+    uses: MatrixAI/.github/.github/workflows/library-js-feature.yml@master

.github/workflows/feature.yml

@@ -0,0 +1,27 @@
+name: "CI / Staging"
+
+on:
+  push:
+    branches:
+      - staging
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  use-library-js-staging:
+    permissions:
+      contents: write
+      actions: write
+      checks: write
+      pull-requests: write
+    uses: MatrixAI/.github/.github/workflows/library-js-staging.yml@master
+    secrets:
+      GH_TOKEN: ${{ secrets.GH_TOKEN }}
+      GIT_AUTHOR_EMAIL: ${{ secrets.GIT_AUTHOR_EMAIL }}
+      GIT_AUTHOR_NAME: ${{ secrets.GIT_AUTHOR_NAME }}
+      GIT_COMMITTER_EMAIL: ${{ secrets.GIT_COMMITTER_EMAIL }}
+      GIT_COMMITTER_NAME: ${{ secrets.GIT_COMMITTER_NAME }}
+

.github/workflows/staging.yml

@@ -0,0 +1,16 @@
+name: "CI / Tag"
+
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+  workflow_dispatch:
+
+jobs:
+  use-library-js-tag:
+    permissions:
+      contents: read
+      actions: write
+    uses: MatrixAI/.github/.github/workflows/library-js-tag.yml@master
+    secrets:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/tag.yml

@@ -3,8 +3,6 @@
     nixpkgs-matrix = {
       type = "indirect";
       id = "nixpkgs-matrix";
-      inputs.nixpkgs.url =
-        "github:NixOS/nixpkgs?rev=e69e710edfed397959507bcee120ec8a9c7ff03e";
     };
     flake-utils.url = "github:numtide/flake-utils";
   };
@@ -13,17 +11,15 @@
     flake-utils.lib.eachDefaultSystem (system:
       let
         pkgs = nixpkgs-matrix.legacyPackages.${system};
-
         shell = { ci ? false }:
           with pkgs;
-          mkShell {
+          pkgs.mkShell {
             nativeBuildInputs = [ nodejs_20 shellcheck gitAndTools.gh ];
-            NIX_DONT_SET_RPATH = true;
-            NIX_NO_SELF_RPATH = true;
+            PKG_IGNORE_TAG = 1;
             shellHook = ''
               echo "Entering $(npm pkg get name)"
               set -o allexport
-              . ./.env
+              . <(polykey secrets env js-rpc)
               set +o allexport
               set -v
               ${lib.optionalString ci ''
@@ -33,8 +29,11 @@
                 shopt -s inherit_errexit
               ''}
               mkdir --parents "$(pwd)/tmp"
+
               export PATH="$(pwd)/dist/bin:$(npm root)/.bin:$PATH"
+
               npm install --ignore-scripts
+
               set +v
             '';
           };