chore: harden v0.1 release candidate (#25) #2
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish npm | |
| on: | |
| push: | |
| tags: | |
| - "v*" | |
| permissions: | |
| contents: read | |
| id-token: write | |
| jobs: | |
| publish: | |
| runs-on: ubuntu-latest | |
| environment: npm | |
| steps: | |
| - name: Check out tagged revision | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 24 | |
| registry-url: https://registry.npmjs.org | |
| cache: npm | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Install Chromium | |
| run: npx playwright install --with-deps chromium | |
| - name: Match package version to tag | |
| run: npm run version:check -- --tag "$GITHUB_REF_NAME" | |
| - name: Validate release candidate | |
| run: | | |
| npm run format:check | |
| npm run lint | |
| npm run typecheck | |
| npm test | |
| npm run fuzz:smoke | |
| npm run build | |
| npm run browser:smoke | |
| npm run package:audit | |
| npm run license:audit | |
| npm audit --audit-level=high | |
| - name: Publish with provenance | |
| run: npm publish --provenance --access public |