fix(ci): upgrade npm to 11+ for OIDC trusted publishing #2

	name: Publish to npm

	on:
	push:
	tags: ['v*']

	jobs:
	test:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	node-version: [18, 20]

	steps:
	- uses: actions/checkout@v4

	- name: Use Node.js ${{ matrix.node-version }}
	uses: actions/setup-node@v4
	with:
	node-version: ${{ matrix.node-version }}
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Typecheck
	run: npx tsc --noEmit

	- name: Test
	run: npm test

	publish:
	needs: test
	runs-on: ubuntu-latest

	permissions:
	contents: write
	id-token: write

	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: npm
	registry-url: https://registry.npmjs.org

	- name: Upgrade npm for OIDC trusted publishing
	run: npm install -g npm@latest

	- name: Install dependencies
	run: npm ci

	- name: Build
	run: npm run build

	- name: Publish
	run: npm publish --access public

	- name: Create GitHub Release
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	TAG_NAME: ${{ github.ref_name }}
	run: gh release create "$TAG_NAME" --generate-notes

Navigation Menu