feat: add dry-run publish to PRs\n\n- Make Publish job run on PRs with dry-run mode\n- Skip npm auth and real publishing on PRs\n- Keep real publishing for tags only

Author: kevinmichaelchen

.github/workflows/CI.yml

@@ -222,13 +222,71 @@ jobs:
               npm test
             '
 
+  dry-run-publish:
+    name: Dry Run Publish
+    runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request'
+    needs:
+      - build
+      - test
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 18
+          check-latest: true
+          cache: npm
+
+      - name: Cache NPM dependencies
+        uses: actions/cache@v4
+        with:
+          path: node_modules
+          key: npm-cache-ubuntu-latest-${{ hashFiles('package-lock.json') }}
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Download artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: bindings-aarch64-apple-darwin
+
+      - name: Move artifacts
+        run: |
+          mkdir -p dist
+          find . -type f -name 'cel-typescript.*.node' -exec mv {} . \;
+
+      - name: List files
+        run: |
+          echo "Root directory:"
+          ls -la
+          echo "\nNode files:"
+          find . -maxdepth 1 -name '*.node'
+        shell: bash
+
+      - name: Link local package
+        run: npm link
+
+      - name: Build TypeScript
+        run: npm run build:ts
+
+      - name: Verify package contents
+        run: |
+          echo "Package contents:"
+          npm pack --dry-run
+
   publish:
-    name: Publish
+    name: ${{ github.event_name == 'pull_request' && 'Publish (Dry Run)' || 'Publish' }}
     runs-on: ubuntu-latest
     permissions:
       contents: read
       id-token: write
-    if: startsWith(github.ref, 'refs/tags/v')
+    if: startsWith(github.ref, 'refs/tags/v') || github.event_name == 'pull_request'
     needs:
       - build
       - test
@@ -293,11 +351,16 @@ jobs:
           npm pack --dry-run
 
       - name: Configure npm
+        if: github.event_name != 'pull_request'
         run: |
           echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
 
       - name: Publish
-        if: env.NPM_TOKEN != ''
+        if: github.event_name != 'pull_request' && env.NPM_TOKEN != ''
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npm publish --access public --provenance
+
+      - name: Dry Run Publish
+        if: github.event_name == 'pull_request'
+        run: npm publish --dry-run