Add update to third-party license and remove publish job in ci.yml

Author: Luke-Sanderson

.github/workflows/CI.yml

@@ -290,54 +290,6 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           parallel-finished: true    
-  publish:
-    name: Publish
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      id-token: write
-    needs:
-      - lint
-      - test
-      - test-macOS-windows-binding
-      - test-linux-binding
-    steps:
-      - uses: actions/checkout@v5
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: yarn
-      - name: Install dependencies
-        run: yarn install
-      - name: create npm dirs
-        run: yarn napi create-npm-dirs
-      - name: Download all artifacts
-        uses: actions/download-artifact@v5
-        with:
-          path: artifacts
-      - name: Move artifacts
-        run: yarn artifacts
-      - name: List packages
-        run: ls -R ./npm
-        shell: bash
-      - name: Publish
-        run: |
-          npm config set provenance true
-          if git log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+$";
-          then
-            echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
-            npm publish --access public
-          elif git log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+";
-          then
-            echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
-            npm publish --tag next --access public
-          else
-            echo "Not a release, skipping publish"
-          fi
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
   license-and-audit:
     runs-on: ubuntu-latest
     steps:

.github/workflows/release.yml

@@ -37,12 +37,18 @@ jobs:
         run: yarn install
       - name: Install conventional-changelog-cli
         run: npm install -g conventional-changelog-cli
+      - name: Install cargo tools for license verification
+        run: |
+          cargo install --locked --version 0.8.2 cargo-about
       - name: Update package.json version
         run: |
           npm version ${{ github.event.inputs.version }} --no-git-tag-version
       - name: Update Cargo.toml version
         run: |
           sed -i 's/^version = ".*"/version = "${{ github.event.inputs.version }}"/' Cargo.toml
+      - name: Update third-party licenses
+        run: |
+          cargo about generate about.hbs > LICENSE-3RD-PARTY.txt
       - name: Generate changelog
         run: |
           conventional-changelog -p conventionalcommits -i CHANGELOG.md -s
@@ -52,7 +58,7 @@ jobs:
         run: |
           git config --local user.email "[email protected]"
           git config --local user.name "GitHub Action"
-          git add package.json Cargo.toml index.js index.d.ts CHANGELOG.md
+          git add package.json Cargo.toml index.js index.d.ts CHANGELOG.md LICENSE-3RD-PARTY.txt
           git commit -m "${{ github.event.inputs.version }}"
           git push
       - name: Set version output
@@ -162,7 +168,22 @@ jobs:
       - name: Publish to NPM
         run: |
           npm config set provenance true
-          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
-          npm publish --access public
+          COMMIT_MSG=$(git log -1 --pretty=%B)
+          if echo "$COMMIT_MSG" | grep -E "^[0-9]+\.[0-9]+\.[0-9]+$" > /dev/null;
+          then
+            echo "Publishing stable release to latest tag"
+            echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
+            npm publish --access public
+          elif echo "$COMMIT_MSG" | grep -E "^[0-9]+\.[0-9]+\.[0-9]+" > /dev/null;
+          then
+            echo "Publishing pre-release to next tag"
+            echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
+            npm publish --tag next --access public
+          else
+            echo "Invalid release tag format: '$COMMIT_MSG'"
+            echo "Expected format: X.Y.Z or X.Y.Z-suffix"
+            echo "Skipping publish"
+            exit 0
+          fi
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}