chore: migrate publishing pipeline to GHA from CircleCI [DX-541]

.contentful/vault-secrets.yaml

@@ -5,6 +5,3 @@ services:
       - dependabot
       - semantic-release
       - packages-read
-  circleci:
-    policies:
-      - semantic-release-ecosystem

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,56 @@
+---
+name: Bug Report
+about: Create a report to help us improve
+title: '[BUG] '
+labels: bug
+assignees: ''
+---
+
+## Bug Description
+
+A clear and concise description of what the bug is.
+
+## Steps to Reproduce
+
+1. Go to '...'
+2. Execute '...'
+3. See error
+
+## Expected Behavior
+
+A clear and concise description of what you expected to happen.
+
+## Actual Behavior
+
+A clear and concise description of what actually happened.
+
+## Code Sample
+
+```javascript
+// Minimal code to reproduce the issue
+```
+
+## Environment
+
+- OS: [e.g. macOS 13.0, Windows 11, Ubuntu 22.04]
+- Package Version: [e.g. 1.2.3]
+- Node Version: [e.g. 18.0.0]
+- Package Manager: [e.g. npm 9.0.0, yarn 1.22.0]
+
+## Error Messages/Logs
+
+```
+Paste any error messages or relevant logs here
+```
+
+## Screenshots
+
+If applicable, add screenshots to help explain your problem.
+
+## Additional Context
+
+Add any other context about the problem here.
+
+## Possible Solution
+
+If you have suggestions on how to fix the bug, please describe them here.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Question or Discussion
+    url: https://github.com/username/repo-name/discussions
+    about: Ask questions or discuss ideas with the community
+  - name: Documentation
+    url: https://docs.yourproject.com
+    about: Check out our documentation for help and guides
+  - name: Security Vulnerability
+    url: https://github.com/username/repo-name/security/advisories/new
+    about: Report a security vulnerability privately

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,70 @@
+---
+name: Feature Request
+about: Suggest an idea for this project
+title: '[FEATURE] '
+labels: enhancement
+assignees: ''
+---
+
+## Feature Description
+
+A clear and concise description of the feature you'd like to see.
+
+## Problem Statement
+
+Is your feature request related to a problem? Please describe.
+Example: I'm always frustrated when [...]
+
+## Proposed Solution
+
+A clear and concise description of what you want to happen.
+
+## Use Case
+
+Describe the use case for this feature. How would you use it?
+
+```javascript
+// Example of how the feature would be used
+const example = new Feature({
+  option: 'value',
+});
+```
+
+## Alternatives Considered
+
+A clear and concise description of any alternative solutions or features you've considered.
+
+## Benefits
+
+What are the benefits of implementing this feature?
+
+- Benefit 1
+- Benefit 2
+- Benefit 3
+
+## Potential Drawbacks
+
+Are there any potential drawbacks or challenges with this feature?
+
+## Additional Context
+
+Add any other context, screenshots, or examples about the feature request here.
+
+## Implementation Suggestions
+
+If you have ideas about how this could be implemented, please share them here.
+
+## Priority
+
+How important is this feature to you?
+
+- [ ] Critical - Blocking my usage
+- [ ] High - Important for my use case
+- [ ] Medium - Would be nice to have
+- [ ] Low - Just a suggestion
+
+## Willingness to Contribute
+
+- [ ] I'd be willing to submit a PR for this feature
+- [ ] I can help test this feature
+- [ ] I can help with documentation

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,29 @@
+<!--
+Thank you for opening a pull request.
+
+Please fill in as much of the template below as you're able. Feel free to remove
+any section you want to skip.
+-->
+
+## Summary
+
+<!-- Give a short summary what your PR is introducing/fixing. -->
+
+## Description
+
+<!-- Describe your changes in detail -->
+
+## Motivation and Context
+
+<!--
+Why is this change required? What problem does it solve?
+If it fixes an open issue, please link to the issue here.
+-->
+
+## PR Checklist
+
+- [ ] I have read the `CONTRIBUTING.md` file
+- [ ] All commits follow [conventional commits](https://www.conventionalcommits.org/en/v1.0.0/)
+- [ ] Documentation is updated (if necessary)
+- [ ] PR doesn't contain any sensitive information
+- [ ] There are no breaking changes

.github/workflows/build.yaml

@@ -0,0 +1,37 @@
+name: Build
+
+on:
+  workflow_call:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '22'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Check build artifacts
+        run: ls -la dist/
+
+      - name: Save Build folders
+        uses: actions/cache/save@v4
+        with:
+          path: |
+            dist
+          key: build-cache-${{ github.run_id }}-${{ github.run_attempt }}

.github/workflows/check.yaml

@@ -0,0 +1,60 @@
+name: Run Checks
+
+on:
+  workflow_call:
+    secrets:
+      VAULT_URL:
+        required: true
+      MANAGEMENT_TOKEN:
+        required: true
+      DELIVERY_TOKEN:
+        required: true
+      EXPORT_SPACE_ID:
+        required: true
+      EXPORT_SPACE_ID_EMBARGOED_ASSETS:
+        required: true
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '22'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Restore the build folders
+        uses: actions/cache/restore@v4
+        with:
+          path: |
+            dist
+          key: build-cache-${{ github.run_id }}-${{ github.run_attempt }}
+
+      # Prior CI pipeline did not lint or format, skipping for now
+      # - name: Run linter
+      #   run: npm run lint
+
+      # - name: Check formatting
+      #   run: npm run format:check
+
+      - name: Run unit tests
+        run: npm run test:unit
+
+      - name: Run integration tests
+        run: npm run test:integration
+        env:
+          MANAGEMENT_TOKEN: ${{ secrets.MANAGEMENT_TOKEN }}
+          DELIVERY_TOKEN: ${{ secrets.DELIVERY_TOKEN }}
+          EXPORT_SPACE_ID: ${{ secrets.EXPORT_SPACE_ID }}
+          EXPORT_SPACE_ID_EMBARGOED_ASSETS: ${{ secrets.EXPORT_SPACE_ID_EMBARGOED_ASSETS }}

.github/workflows/codeql.yml → .github/workflows/codeql.yaml

@@ -5,9 +5,6 @@ on:
   push:
     branches: [main]
     paths: [".github/workflows/**"]
-  pull_request:
-    branches: [main]
-    paths: [".github/workflows/**"]
 
 jobs:
   analyze:
@@ -19,14 +16,14 @@ jobs:
       security-events: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: actions
 
       - name: Run CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: actions

.github/workflows/main.yaml

@@ -0,0 +1,28 @@
+name: CI
+permissions:
+  contents: read
+
+on:
+  push:
+    branches: ['*']
+
+jobs:
+  build:
+    uses: ./.github/workflows/build.yaml
+
+  check:
+    needs: build
+    uses: ./.github/workflows/check.yaml
+    secrets: inherit
+
+  release:
+    if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/beta')
+    needs: [build, check]
+    permissions:
+      contents: write
+      id-token: write
+      actions: read
+    uses: ./.github/workflows/release.yaml
+    secrets:
+      VAULT_URL: ${{ secrets.VAULT_URL }}
+