Merge pull request #4 from nbaglivo/cicd-publish

(cicd): publish on merge to main

Author: nbaglivo

.github/actions/setup-pnpm/action.yml

@@ -0,0 +1,38 @@
+name: Setup pnpm
+description: pnpm 9, Node (configurable), and frozen lockfile install — run actions/checkout before this action
+
+inputs:
+  node-version:
+    description: Node.js version (default 22; Trusted Publishing on npm requires >= 22.14.0)
+    required: false
+    default: '22'
+  registry-url:
+    description: Optional npm registry URL (e.g. https://registry.npmjs.org for publishing)
+    required: false
+    default: ''
+
+runs:
+  using: composite
+  steps:
+    - uses: pnpm/action-setup@v4
+      with:
+        version: 9
+
+    - name: Setup Node.js
+      if: ${{ inputs.registry-url == '' }}
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: pnpm
+
+    - name: Setup Node.js (npm registry)
+      if: ${{ inputs.registry-url != '' }}
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: pnpm
+        registry-url: ${{ inputs.registry-url }}
+
+    - name: Install dependencies
+      shell: bash
+      run: pnpm install --frozen-lockfile

.github/workflows/ci.yml

@@ -9,22 +9,10 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'pnpm'
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+      - name: Setup workspace
+        uses: ./.github/actions/setup-pnpm
 
       - name: Run tests
         run: pnpm test

.github/workflows/publish-npm.yml

@@ -0,0 +1,37 @@
+name: Publish npm
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+  id-token: write
+
+concurrency:
+  group: npm-publish-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    name: Publish to npm
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup workspace
+        uses: ./.github/actions/setup-pnpm
+        with:
+          registry-url: https://registry.npmjs.org
+
+      - name: Run tests
+        run: pnpm test
+
+      - name: Build
+        run: pnpm build
+
+      - name: Publish to npm
+        run: |
+          npm install -g npm@^11.5.1
+          pnpm publish --no-git-checks