release.yml

# adapted from https://github.com/googleapis/release-please-action#automating-publication-to-npm
name: release-please

on:
  push:
    branches:
      - main
env:
  # renovate datasource=github-releases depName=jdx/mise
  MISE_VERSION: 'v2025.11.7'

# `id-token` for publishing: https://docs.npmjs.com/trusted-publishers#github-actions-configuration
# the rest for release-please: https://github.com/googleapis/release-please-action#basic-configuration
permissions:
  id-token: write # Required for kOIDC
  contents: write # Required by release-please to create a release
  pull-requests: write # Required by release-please to open a release PR
  issues: write # Required by release-please to comment on release-related issues

jobs:
  release-please:
    runs-on: ubuntu-latest
    steps:
      - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4.4.0
        id: release
        with:
          release-type: node
      # The logic below handles the npm publication:
      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
        # these if statements ensure that a publication only occurs when
        # a new release is created:
        if: ${{ steps.release.outputs.release_created }}
      - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
        with:
          version: ${{ env.MISE_VERSION }}
        if: ${{ steps.release.outputs.release_created }}
      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          cache: yarn
          registry-url: 'https://registry.npmjs.org'
        if: ${{ steps.release.outputs.release_created }}
      - run: yarn --immutable
        if: ${{ steps.release.outputs.release_created }}
      - run: |
          yarn npm publish --provenance
        if: ${{ steps.release.outputs.release_created }}