feat: automate the release and publishing with semantic-release (#1683)

.github/workflows/complete.js.yml → .github/workflows/pull-request.yml

@@ -1,18 +1,13 @@
 # This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
 # For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
+# 
 
-name: complete
+name: Pull Request
 
 on:
   workflow_dispatch:
-  push:
-    branches:
-      - master
-      - next
   pull_request:
-    branches: 
-      - master
-      - next
+    types: [opened, synchronize]
 
 jobs:
   build:
@@ -23,15 +18,19 @@ jobs:
 
     - uses: actions/checkout@v4
     - name: Use Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: '20.x'
-
+        cache: 'npm'
+
     - name: Install dependencies
-      run: npm ci
-
-    - name: Check Quality
-      run: npm run circular-deps.check & npm run lint
+      run: npm ci --no-audit
+
+    - name: Security
+      run: npm audit --omit dev && npm audit signatures
+
+    - name: Quality
+      run: npm run circular-deps & npm run lint
 
     - name: Test
       run: npm run e2e & npm run test

.github/workflows/release.yml

@@ -0,0 +1,48 @@
+# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
+# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
+# 
+
+name: Release
+on:
+  push:
+    branches:
+      - master
+      - next
+      - ^[0-9]+(.[0-9]+)?.x$
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # to enable use of OIDC for npm provenance
+      contents: write
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+        persist-credentials: false
+
+    - name: Use Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '20.x'
+        cache: 'npm'
+        registry-url: 'https://registry.npmjs.org'
+
+    - name: Install dependencies
+      run: npm ci --no-audit
+
+    - name: Security
+      run: npm audit --omit dev && npm audit signatures
+
+    - name: Quality
+      run: npm run circular-deps & npm run lint
+
+    - name: Test
+      run: npm run e2e & npm run test
+
+    - name: Release
+      env:
+        GITHUB_TOKEN: ${{ secrets.PAT }}
+        NODE_AUTH_TOKEN : ${{ secrets.NPM_TOKEN }}
+      run: npm run release