release.yml

name: NPM Publish

on:
  release:
    types: [created]

permissions:
  id-token: write # Required for OIDC
  contents: write # Required to push version bump commit

jobs:
  publish-npm:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-node@v6
        with:
          node-version: 22
          registry-url: https://registry.npmjs.org/
      - run: npm install -g npm@latest
      - run: npm ci --ignore-scripts --no-audit --no-fund
      - name: Bump version in package.json
        run: |
          VERSION="${{ github.event.release.tag_name }}"
          npm version "${VERSION#v}" --no-git-tag-version
      - name: Commit and push version bump
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add package.json package-lock.json
          git commit -m "chore: bump version to ${{ github.event.release.tag_name }}"
          git push origin HEAD:main
      - run: npx playwright install chromium --only-shell
      - run: npm test -- --forbid-only
      - run: npm run build
      - run: npm publish --access public