Files
Yury Semikhatsky 655530f6d0 devops: restore npm publishing from GitHub Actions (#459)
## Summary
- Release publishing goes back to the GitHub Actions workflow with OIDC
trusted publishing and provenance.
- The ESRP pipeline stays available for manual on-demand runs only (no
automatic triggers).
2026-09-03 12:04:51 -07:00

22 lines
570 B
YAML

name: Publish
on:
workflow_dispatch:
release:
types: [published]
jobs:
publish-npm:
if: github.event_name == 'release'
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write # Required for OIDC npm publishing
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: 24
registry-url: https://registry.npmjs.org/
- run: npm ci
- run: npm publish