Use OIDC publishing

Author: eddeee888

.github/workflows/pr.yml

@@ -4,41 +4,11 @@ on:
     branches:
       - master
 
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  contents: write
-  id-token: write
-  pull-requests: write
-
 jobs:
   dependencies:
     uses: the-guild-org/shared-config/.github/workflows/changesets-dependencies.yaml@f4eea983237a44bb0ca19c3348dacbfdfcdbec23 # main
     if: ${{ github.event.pull_request.title != 'Upcoming Release Changes' }}
-    secrets:
-      githubToken: ${{ secrets.GITHUB_TOKEN  }}
-
-  alpha:
-    uses: the-guild-org/shared-config/.github/workflows/release-snapshot.yml@f4eea983237a44bb0ca19c3348dacbfdfcdbec23 # main
-    if: ${{ github.event.pull_request.title != 'Upcoming Release Changes' }}
-    with:
-      npmTag: alpha
-      buildScript: build
-      packageManager: pnpm
-    secrets:
-      githubToken: ${{ secrets.GITHUB_TOKEN }}
-      npmToken: ${{ secrets.NPM_TOKEN }}
-
-  release-candidate:
-    uses: the-guild-org/shared-config/.github/workflows/release-snapshot.yml@f4eea983237a44bb0ca19c3348dacbfdfcdbec23 # main
-    if: ${{ github.event.pull_request.title == 'Upcoming Release Changes' }}
-    with:
-      npmTag: rc
-      restoreDeletedChangesets: true
-      buildScript: build
-      packageManager: pnpm
+    permissions:
+      contents: write # allows modifying changeset files
     secrets:
       githubToken: ${{ secrets.GITHUB_TOKEN }}
-      npmToken: ${{ secrets.NPM_TOKEN }}

.github/workflows/release.yaml

@@ -0,0 +1,40 @@
+name: release
+on:
+  pull_request: # for snapshot release
+    branches:
+      - master
+
+  push: # for stable release
+    branches:
+      - master
+
+jobs:
+  release-snapshot:
+    if: github.event_name == 'pull_request'
+    uses: the-guild-org/shared-config/.github/workflows/release-snapshot.yml@f4eea983237a44bb0ca19c3348dacbfdfcdbec23 # main
+    permissions:
+      id-token: write # allows ODIC publishing
+      pull-requests: write # allows creating comment with alpha versions
+    with:
+      npmTag: alpha
+      packageManager: pnpm
+      buildScript: build
+      nodeVersion: 24
+    secrets:
+      githubToken: ${{ secrets.GITHUB_TOKEN }}
+      npmToken: FILLER
+
+  release-stable:
+    if: github.event_name == 'push'
+    uses: the-guild-org/shared-config/.github/workflows/release-stable.yml@f4eea983237a44bb0ca19c3348dacbfdfcdbec23 # main
+    permissions:
+      id-token: write # allows ODIC publishing
+      pull-requests: write # allows creating Version Packages PR
+      contents: write # allows modifying changeset files
+    with:
+      packageManager: pnpm
+      releaseScript: release
+      nodeVersion: 24
+    secrets:
+      githubToken: ${{ secrets.GITHUB_TOKEN }}
+      npmToken: FILLER