Merge pull request #4 from sanity-labs/fix/oidc-release-workflow

fix(ci): use direct npm publish for OIDC provenance

Author: kmelve

.github/workflows/release.yml

@@ -41,14 +41,26 @@ jobs:
       - name: Test
         run: pnpm test:run
 
-      - name: Create Release Pull Request or Publish
-        id: changesets
+      - name: Check if version exists on npm
+        id: check
+        run: |
+          CURRENT_VERSION=$(node -p "require('./package.json').version")
+          echo "version=$CURRENT_VERSION" >> $GITHUB_OUTPUT
+          if npm view boxfix@$CURRENT_VERSION > /dev/null 2>&1; then
+            echo "exists=true" >> $GITHUB_OUTPUT
+          else
+            echo "exists=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Publish to npm
+        if: steps.check.outputs.exists == 'false'
+        run: npm publish --provenance --access public
+
+      - name: Create Release Pull Request
         uses: changesets/action@v1
         with:
-          publish: pnpm release
           version: pnpm changeset version
           title: 'chore: version packages'
           commit: 'chore: version packages'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_CONFIG_PROVENANCE: true