👷‍♀️ Automated publish

.github/workflows/publish.yml

@@ -0,0 +1,32 @@
+name: Publish
+
+on:
+  push:
+    tags:
+    - '*'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+    - uses: actions/checkout@v3
+    - uses: actions/setup-node@v3
+      with:
+        node-version: '18.x'
+        registry-url: 'https://npm.pkg.github.com'
+    - name: Install
+      # Skip post-install to avoid malicious scripts stealing PAT
+      run: npm install --ignore-script
+      env:
+        # GITHUB_TOKEN can't access packages hosted in private repos,
+        # even within the same organisation
+        NODE_AUTH_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+    - name: Post-install
+      run: npm rebuild && npm run prepare --if-present
+    - name: Build
+      run: npm run build
+    - name: Publish
+      run: npm publish
+      env:
+        NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

@@ -0,0 +1,40 @@
+name: Test
+
+on:
+  push:
+    branches:
+    - main
+  pull_request:
+    branches:
+    - main
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+    - uses: actions/checkout@v3
+      with:
+        # Use PAT instead of default Github token, because the default
+        # token deliberately will not trigger another workflow run
+        token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+    - uses: actions/setup-node@v3
+      with:
+        node-version: '16.x'
+        registry-url: 'https://npm.pkg.github.com'
+    - name: Install
+      # Skip post-install to avoid malicious scripts stealing PAT
+      run: npm install --ignore-script
+      env:
+        # GITHUB_TOKEN can't access packages hosted in private repos,
+        # even within the same organisation
+        NODE_AUTH_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+    - name: Post-install
+      run: npm rebuild && npm run prepare --if-present
+    - name: Lint
+      run: npm run lint
+    - name: Test
+      run: npm test
+    - name: Tag
+      if: ${{ github.ref == 'refs/heads/main' }}
+      run: ./tag.sh

.gitignore

@@ -6,3 +6,4 @@
 *.log
 .DS_Store
 node_modules
+package-lock.json

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reedsy/vuex",
-  "version": "4.1.1",
+  "version": "4.1.2",
   "description": "state management for Vue.js",
   "main": "dist/vuex.cjs.js",
   "exports": {
@@ -74,14 +74,15 @@
     "cross-env": "^7.0.3",
     "css-loader": "^2.1.0",
     "enquirer": "^2.3.6",
-    "eslint": "^7.32.0",
+    "eslint": "^6.8.0",
+    "eslint-plugin-vue": "^9.17.0",
     "eslint-plugin-vue-libs": "^4.0.0",
     "execa": "^5.0.0",
     "express": "^4.18.2",
     "fs-extra": "^10.1.0",
     "jest": "^29.2.0",
     "jest-environment-jsdom": "^29.2.0",
-    "puppeteer": "^19.0.0",
+    "puppeteer": "=19.0.0",
     "regenerator-runtime": "^0.13.5",
     "rollup": "^2.79.1",
     "rollup-plugin-terser": "^7.0.2",

tag.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+
+VERSION=$(node -p "require('./package.json').version")
+
+git config --local user.email "github@reedsy.com"
+git config --local user.name "GitHub Action"
+git fetch --tags
+
+VERSION_COUNT=$(git tag --list $VERSION | wc -l)
+
+if [ $VERSION_COUNT -gt 0 ]
+then
+  echo "Version $VERSION already deployed."
+  exit 0
+else
+  echo "Deploying version $VERSION"
+fi
+
+echo '!/dist' >> .gitignore
+
+git checkout -b release-$VERSION
+git add .gitignore
+git add --all dist/
+git commit --message "Release version $VERSION"
+git tag $VERSION
+git push origin refs/tags/$VERSION