ci: improve release process

Author: fmenezes

.github/workflows/publish.yaml

@@ -2,28 +2,64 @@
 name: Publish
 on:
   push:
-    tags:
-      - v*
+    branches:
+      - main
+permissions:
+  contents: write
 jobs:
   publish:
     runs-on: ubuntu-latest
     environment: Production
     steps:
       - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - uses: actions/setup-node@v4
         with:
           node-version-file: package.json
           registry-url: "https://registry.npmjs.org"
           cache: "npm"
+      - name: Get version
+        id: get-version
+        shell: bash
+        run: |
+          set +e
+
+          VERSION=v$(jq -r '.version' < package.json)
+          echo "VERSION=${VERSION}" >> "$GITHUB_OUTPUT"
+      - name: Check if version already exists
+        id: check-version
+        shell: bash
+        run: |
+          set +e
+
+          git rev-parse "${{ steps.get-version.outputs.VERSION }}" >/dev/null 2>&1
+          if [[ $? -eq 0 ]]; then
+            echo "VERSION_EXISTS=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "VERSION_EXISTS=false" >> "$GITHUB_OUTPUT"
+          fi
       - name: Build package
+        if: steps.check-version.outputs.VERSION_EXISTS == 'false'
         run: |
           npm ci
           npm run build
       - name: Publish to NPM
+        if: steps.check-version.outputs.VERSION_EXISTS == 'false'
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-      - name: Publish Github release
+      - name: Publish git tag
+        if: steps.check-version.outputs.VERSION_EXISTS == 'false'
+        run: |
+          git config --global user.name 'github-actions[bot]'
+          git config --global user.email '41898282+github-actions[bot]@users.noreply.github.com'
+          git tag ${{ steps.get-version.outputs.VERSION }}
+          git push origin --tags
+      - name: Publish git release
+        if: steps.check-version.outputs.VERSION_EXISTS == 'false'
+        env:
+          GH_TOKEN: ${{ github.token }}
         run: |
-          gh release create ${{ github.ref }} --title "${{ github.ref }}" --notes "Release ${{ github.ref }}" --generate-notes
+          gh release create ${{ github.env.VERSION }} --title "${{ github.env.VERSION }}" --generate-notes

.github/workflows/version_bump.yaml

@@ -0,0 +1,37 @@
+---
+name: Version Bump
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to bump to'
+        required: true
+        default: 'patch'
+jobs:
+  bump-version:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: package.json
+          registry-url: "https://registry.npmjs.org"
+          cache: "npm"
+      - name: Build package
+        run: |
+          npm ci
+      - name: Bump version
+        run: |
+          npm version ${{ github.event.inputs.version }} --no-git-tag-version
+      - name: Create PR
+        uses: peter-evans/create-pull-request@v4
+        with:
+          title: 'Bump version to ${{ github.event.inputs.version }}'
+          body: 'Bump version to ${{ github.event.inputs.version }}'
+          base: main
+          branch: ci/version-bump-${{ github.event.inputs.version }}
+          commit-message: 'Bump version to ${{ github.event.inputs.version }}'
+          author: 'github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>'
+          committer: 'github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>'
+          labels: version-bump

.npmrc

@@ -0,0 +1 @@
+git-tag-version=false