publish.yml

name: Publish to NPM

on:
  release:
    types: [published]
  workflow_dispatch:

permissions:
  id-token: write
  contents: read

jobs:
  publish:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4

    - name: Use Node.js
      uses: actions/setup-node@v4
      with:
        node-version: '22'
        registry-url: 'https://registry.npmjs.org'

    - name: Update npm to latest version for OIDC support
      run: npm install -g npm@latest

    - name: Determine release tag
      id: release_tag
      run: |
        if [[ "${{ github.ref }}" == *"-rc"* ]] || [[ "${{ github.ref }}" == *"-RC"* ]]; then
          echo "tag=next" >> "$GITHUB_OUTPUT"
        else
          echo "tag=latest" >> "$GITHUB_OUTPUT"
        fi

    - name: Install dependencies and build
      run: |
        npm install
        npm run build

    - name: Publish
      run: npm publish --provenance --access public --tag ${{ steps.release_tag.outputs.tag }}