|
73 | 73 | with: |
74 | 74 | path: './coverage/lcov.info' |
75 | 75 | min_coverage: 95 |
| 76 | + |
| 77 | + release: |
| 78 | + name: Release |
| 79 | + concurrency: release |
| 80 | + if: ${{ github.event_name == 'push' && github.actor != 'dependabot[bot]' }} |
| 81 | + runs-on: ubuntu-latest |
| 82 | + needs: [lint, unittest] |
| 83 | + permissions: |
| 84 | + contents: write # to be able to publish a GitHub release |
| 85 | + issues: write # to be able to comment on released issues |
| 86 | + pull-requests: write # to be able to comment on released pull requests |
| 87 | + id-token: write # to enable use of OIDC for npm provenance |
| 88 | + steps: |
| 89 | + - name: Checkout |
| 90 | + uses: actions/checkout@v4 |
| 91 | + with: |
| 92 | + fetch-depth: 0 |
| 93 | + - name: Setup Node.js |
| 94 | + uses: actions/setup-node@v4 |
| 95 | + with: |
| 96 | + node-version: 22 |
| 97 | + cache: 'npm' |
| 98 | + - name: Install dependencies |
| 99 | + run: npm clean-install |
| 100 | + - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies |
| 101 | + run: npm audit signatures |
| 102 | + - name: Release |
| 103 | + env: |
| 104 | + NPM_CONFIG_PROVENANCE: true |
| 105 | + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
| 106 | + NPM_TOKEN: ${{ secrets.NPM_TOKEN }} |
| 107 | + run: npx semantic-release |
| 108 | + |
0 commit comments