chore: added publish workflow

Author: codeart1st

.github/workflows/ci.yml

@@ -1,9 +1,15 @@
 name: CI
 
 on:
+  workflow_call:
   schedule:
     - cron: "0 7 * * 1"
   push:
+    branches:
+      - '*'
+      - '!main'
+      - '!beta'
+      - '!alpha'
   pull_request:
 
 permissions:
@@ -15,7 +21,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository and submodules
-        uses: actions/[email protected].1
+        uses: actions/[email protected].6
         with:
           submodules: recursive
 
@@ -57,7 +63,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository and submodules
-        uses: actions/[email protected].1
+        uses: actions/[email protected].6
         with:
           submodules: recursive
 
@@ -99,7 +105,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository and submodules
-        uses: actions/[email protected].1
+        uses: actions/[email protected].6
         with:
           submodules: recursive
 
@@ -133,7 +139,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository and submodules
-        uses: actions/[email protected].1
+        uses: actions/[email protected].6
         with:
           submodules: recursive
 
@@ -178,7 +184,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository and submodules
-        uses: actions/[email protected].1
+        uses: actions/[email protected].6
         with:
           submodules: recursive
 
@@ -230,7 +236,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository and submodules
-        uses: actions/[email protected].1
+        uses: actions/[email protected].6
         with:
           submodules: recursive
 
@@ -291,7 +297,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository and submodules
-        uses: actions/[email protected].1
+        uses: actions/[email protected].6
         with:
           submodules: recursive
 
@@ -327,7 +333,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository and submodules
-        uses: actions/[email protected].1
+        uses: actions/[email protected].6
         with:
           submodules: recursive
 

.github/workflows/publish.yml

@@ -0,0 +1,50 @@
+name: Publish
+
+on:
+  push:
+    branches:
+      - main
+      - beta
+      - alpha
+
+permissions:
+  contents: read
+
+jobs:
+  ci:
+    uses: ./.github/workflows/ci.yml
+
+  publish:
+    needs: ci
+    timeout-minutes: 20
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+    steps:
+      - name: Checkout repository and submodules
+        uses: actions/[email protected]
+        with:
+          submodules: recursive
+
+      - name: Prepare build environemnt
+        uses: ./.github/actions/prepare-build-env
+
+      - name: Download wasm-pack build output
+        uses: actions/[email protected]
+        with:
+          name: WASM
+          path: dist/
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Verify npm package signatures
+        run: npm audit signatures
+
+      - name: Run semantic-release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx semantic-release