Trusted publish

Author: fisker

.github/renovate.json5

@@ -2,4 +2,24 @@
   $schema: 'https://docs.renovatebot.com/renovate-schema.json',
   dependencyDashboardApproval: true,
   postUpdateOptions: ['yarnDedupeHighest'],
+  packageRules: [
+    {
+      "groupName": "devDependencies",
+      "matchDepTypes": ["devDependencies"]
+    },
+    {
+      "groupName": "dependencies",
+      "matchDepTypes": ["dependencies"],
+      "rangeStrategy": "replace"
+    },
+    {
+      "groupName": "peerDependencies",
+      "matchDepTypes": ["peerDependencies"],
+      "rangeStrategy": "widen"
+    },
+    {
+      groupName: 'GitHub Actions',
+      matchManagers: ['github-actions'],
+    },
+  ],
 }

.github/workflows/publish.yml

@@ -0,0 +1,29 @@
+name: Publish Package
+
+on:
+  push:
+    tags:
+      - v*
+
+permissions: {}
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 'lts/*'
+          cache: 'yarn'
+      - run: |
+          yarn --immutable
+          yarn build
+      - run: npm pkg delete scripts devDependencies packageManager
+      - run: |
+          node --version
+          npm --version
+      - run: npm publish

.release-it.json

@@ -1,12 +1,14 @@
 {
-  "$schema": "https://unpkg.com/release-it@18/schema/release-it.json",
+  "$schema": "https://unpkg.com/release-it/schema/release-it.json",
   "git": {
     "commitMessage": "chore: release v${version}"
   },
   "github": {
     "release": true
   },
+  "npm": {
+    "publish": false
+  },
   "hooks": {
-    "after:bump": "node --run build"
   }
 }