release.yml

name: release
on:
  push:
    branches:
      - main
      - next
  workflow_dispatch:
permissions:
      contents: write
      packages: write
      id-token: write  # Required for npm provenance
jobs:
  release:
    name: release
    runs-on: ubuntu-latest
    concurrency: 
      group: deploy-${{github.ref}}
      cancel-in-progress: true
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          fetch-tags: true
      - uses: actions/setup-node@v4
        with:
          node-version: latest
          registry-url: "https://registry.npmjs.org"
          cache: 'npm'
      - uses: actions/cache@v3
        id: cache-node-modules
        with:
          path: node_modules
          key: ${{runner.os}}-node-${{hashFiles('package-lock.json')}}
      - run: npm ci
      - run: npm run lint
      - run: npm test
      - run: npx autorel@^2
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
          NPM_CONFIG_PROVENANCE: true