publish.yml

# Fast-forwards master to develop and triggers the CD workflow to publish the package.
name: Publish

on: workflow_dispatch

jobs:
  build:
    environment: publish
    runs-on: ubuntu-24.04

    permissions:
      id-token: write # Required by Akeyless
      contents: read
      packages: read

    steps:
      - uses: actions/setup-node@v6
        with:
          node-version: 24

      - name: Import Secrets
        id: import-secrets
        uses: LanceMcCarthy/akeyless-action@v5
        with:
          access-id: ${{ secrets.GH_AKEYLESS_ACCESS_ID }}
          static-secrets: '{ "/WebComponents/prod/tokens/GH_TOKEN": "GH_TOKEN" }'
          export-secrets-to-environment: false

      - name: Check out master
        uses: actions/checkout@v6
        with:
          ref: master
          fetch-depth: 0 # Fetch all branches
          token: ${{ steps.import-secrets.outputs.GH_TOKEN }}

      - name: Fast-forward master to develop
        run: |
          git merge --ff-only origin/develop
          git push origin master