release.yml

name: publish
on:
  release:
    types: [published]

permissions:
  actions: write
  contents: write
  id-token: write # Required for npm trusted publishing (OIDC)

jobs:
  test:
    name: test
    runs-on: ubuntu-latest
    steps:
      - name: checkout and setup
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          ref: master

      - name: node setup
        uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: "yarn"

      - name: install dependencies
        run: yarn install --frozen-lockfile
      - name: run test suites
        run: yarn test

  publish:
    name: publish
    needs: test
    runs-on: ubuntu-latest
    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          ref: master

      - name: node setup
        uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: "yarn"

      - name: Update npm
        run: npm install -g npm@latest

      - name: Verify npm version
        run: npm --version

      - name: install dependencies
        run: yarn install --frozen-lockfile
      - name: build source
        run: yarn build
      - name: publish
        run: yarn publish --access=public
        env:
          NPM_CONFIG_REGISTRY: "https://registry.npmjs.org"
          # NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}