chore: updated workflows, changelog (#115)

Author: SunDevil311

.github/workflows/build-and-publish.yml

@@ -34,14 +34,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Log ENV_MODE
-        run: 'echo "ENV_MODE is set to: $ENV_MODE"'
-
-      - name: Setup Node.js
+      - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: lts/*
-          check-latest: true
+          node-version: 24
           cache: npm
           cache-dependency-path: package-lock.json
 
@@ -79,16 +75,15 @@ jobs:
       - name: Build Node.js project
         run: npm run build
 
-      # Remove build artifacts to avoid publishing them
-      - name: Clean build directory
-        run: rm -rf build/
+      # Create Git archive of version-controlled files
+      - name: Create clean source archive
+        run: git archive --format=tar.gz --output=clean-source.tar.gz HEAD
 
-      # Upload clean source code
-      - name: Upload repository artifacts
+      - name: Upload source archive
         uses: actions/upload-artifact@v4
         with:
-          name: repo-artifacts
-          path: ./
+          name: clean-source
+          path: clean-source.tar.gz
 
   publish-npmjs:
     needs: build
@@ -97,22 +92,33 @@ jobs:
       ENV_MODE: ci
 
     steps:
-      - name: Log ENV_MODE
-        run: 'echo "ENV_MODE is set to: $ENV_MODE"'
-
-      - name: Download repository artifacts
+      - name: Download clean source archive
         uses: actions/download-artifact@v4
         with:
-          name: repo-artifacts
+          name: clean-source
           path: ./
 
+      - name: Extract source archive
+        run: tar -xzf clean-source.tar.gz
+
+      - name: Remove extracted source archive
+        run: rm clean-source.tar.gz
+
       - name: Set up Node.js for npmjs
         uses: actions/setup-node@v4
         with:
-          node-version: lts/*
-          check-latest: true
+          node-version: 24
           registry-url: https://registry.npmjs.org/
           cache: npm
+          cache-dependency-path: package-lock.json
+
+      - name: Upgrade npm
+        run: |
+          corepack enable
+          npm install -g npm@11.4.1
+
+      - name: Install Node.js dependencies
+        run: npm ci
 
       - name: Set up Git user
         run: |
@@ -142,22 +148,33 @@ jobs:
       ENV_MODE: ci
 
     steps:
-      - name: Log ENV_MODE
-        run: 'echo "ENV_MODE is set to: $ENV_MODE"'
-
-      - name: Download repository artifacts
+      - name: Download clean source archive
         uses: actions/download-artifact@v4
         with:
-          name: repo-artifacts
+          name: clean-source
           path: ./
 
-      - name: Setup Node.js for GPR
+      - name: Extract source archive
+        run: tar -xzf clean-source.tar.gz
+
+      - name: Remove extracted source archive
+        run: rm clean-source.tar.gz
+
+      - name: Set up Node.js for GPR
         uses: actions/setup-node@v4
         with:
-          node-version: lts/*
-          check-latest: true
+          node-version: 24
           registry-url: https://npm.pkg.github.com/
           cache: npm
+          cache-dependency-path: package-lock.json
+
+      - name: Upgrade npm
+        run: |
+          corepack enable
+          npm install -g npm@11.4.1
+
+      - name: Install Node.js dependencies
+        run: npm ci
 
       - name: Set up Git user
         run: |

.github/workflows/publish.yml .github/workflows/publish-test.yml.github/workflows/publish.yml renamed to .github/workflows/publish-test.yml

@@ -1,10 +1,10 @@
-# .github/workflows/publish.yml
+# .github/workflows/publish-test.yml
 #
 # Copyright © 2025 Network Pro Strategies (Network Pro™)
 # SPDX-License-Identifier: CC-BY-4.0 OR GPL-3.0-or-later
 # This file is part of Network Pro
 
-name: Publish to Registries
+name: Test Publishing to Registries
 
 on:
   workflow_dispatch:

CHANGELOG.md

@@ -28,11 +28,12 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 - Updated Node.js engine to `24` to match the specified engine constraints in `package.json`.
 - Reordered `npm ci` step to follow Node.js and npm setup to prevent version mismatches during simulation steps.
-- Version bumped to **v1.14.1**
+- Refactored `build-and-publish.yml` to use `git archive` for artifact preparation and aligned it with a tested publishing flow.
+- Removed `.npmrc` token-based authentication in favor of environment secrets to avoid credential conflicts.
 
 ### Added
 
-- Introduced `.github/workflows/publish.yml`, a separate dry-run simulation workflow for testing `npm publish` without deploying to registries.
+- Introduced `.github/workflows/publish-test.yml`, a standalone workflow to safely simulate `npm publish` without publishing.
 - Added commands to display Node.js and npm versions for visibility and troubleshooting in all relevant jobs.
 
 ---