.github/workflows: Drop redundant roundtrips and two-stage tag.

We were releasing to GitHub and then needed a second tag to download them again and publish to npm, being careful to let the first one complete first.

We can simply publish them when we make them. Way fewer roundtrips and renames, and no timing delays.

Author: laurensvalk

.github/workflows/npm-firmware.yml

@@ -11,6 +11,7 @@ env:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
   upload_release:
@@ -44,7 +45,13 @@ jobs:
           poetry run make $MAKEOPTS -C bricks/nxt
           poetry run make $MAKEOPTS -C bricks/ev3
       - name: Get tag
-        run: echo "GITHUB_TAG=${GITHUB_REF#*refs/tags/}" >> $GITHUB_ENV
+        run: |
+          TAG="${GITHUB_REF#*refs/tags/}"
+          NPM_VERSION=$(echo "${TAG#v}" | sed 's/\([0-9]\)a\([0-9]\)/\1-alpha.\2/;s/\([0-9]\)b\([0-9]\)/\1-beta.\2/;s/\([0-9]\)rc\([0-9]\)/\1-rc.\2/')
+          NPM_TAG=$(echo "$NPM_VERSION" | grep -q '-' && echo 'next' || echo 'latest')
+          echo "GITHUB_TAG=$TAG" >> $GITHUB_ENV
+          echo "NPM_VERSION=$NPM_VERSION" >> $GITHUB_ENV
+          echo "NPM_TAG=$NPM_TAG" >> $GITHUB_ENV
       - name: Create Release and Upload Assets
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -56,8 +63,10 @@ jobs:
             PRERELEASE_FLAG=""
           fi
           HUBS="movehub cityhub technichub primehub essentialhub nxt ev3"
+          mkdir -p npm/firmware/build
           for HUB in $HUBS; do
             NEW_FILENAME="./bricks/$HUB/build/pybricks-$HUB-${{ env.GITHUB_TAG }}.zip"
+            cp "./bricks/$HUB/build/firmware.zip" "npm/firmware/build/$HUB.zip"
             mv "./bricks/$HUB/build/firmware.zip" "$NEW_FILENAME"
             ASSETS="$ASSETS $NEW_FILENAME"
           done
@@ -67,3 +76,16 @@ jobs:
               -F CHANGELOG.md \
               $PRERELEASE_FLAG \
               $ASSETS
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+      - name: Publish npm firmware package
+        working-directory: npm/firmware
+        run: |
+          npm version --no-git-tag-version "${{ env.NPM_VERSION }}"
+          echo "export const FIRMWARE_TAG = '${{ env.GITHUB_TAG }}';" > version.ts
+          yarn install
+          npx tsc
+          npm publish --tag "${{ env.NPM_TAG }}"