Merge pull request #85 from scheduleonce/update-npm-publish-workflow

Update npm-publish workflow

Author: mderazon

.github/workflows/npm-publish.yml

@@ -1,23 +1,38 @@
-# This workflow will publish a package to npm when a release is published
-# For more information, see https://docs.github.com/en/actions/publishing-packages/publishing-nodejs-packages
+# This workflow will run tests using node and then publish a package to npm when a release is created
+# For more information see:
+# https://docs.github.com/en/actions/publishing-packages/publishing-nodejs-packages
+# https://docs.npmjs.com/trusted-publishers
+
+name: Node.js Package
 
-name: Publish Package to npmjs
 on:
   release:
     types: [published]
+
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      # setup .npmrc file to publish to npm
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+      - run: npm ci
+      - run: npm test
+
+  publish-npm:
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
-          registry-url: 'https://registry.npmjs.org'
+          node-version: 24
+          registry-url: https://registry.npmjs.org/
       - run: npm ci
-      - run: npm run build:lib
       # scoped packages are private by default so need to add public flag
       - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}