diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index af1ef1a..9c1c8e2 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -14,10 +14,10 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Node.js using mise - uses: jdx/mise-action@v2 + uses: jdx/mise-action@v3 - name: Install dependencies run: pnpm install @@ -30,10 +30,10 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Node.js using mise - uses: jdx/mise-action@v2 + uses: jdx/mise-action@v3 - name: Install dependencies run: pnpm install diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 5378318..885928d 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -5,6 +5,10 @@ on: branches: - main +permissions: + id-token: write # Required for OIDC + contents: read + jobs: release: runs-on: ubuntu-latest @@ -13,13 +17,22 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Check version changes uses: EndBug/version-check@v2 id: check + + - name: Set up Node.js using mise + uses: jdx/mise-action@v3 + + - name: Install dependencies + run: pnpm install + + - name: Build + run: pnpm build - name: Create Git Tag if: steps.check.outputs.changed == 'true' @@ -42,6 +55,4 @@ jobs: - name: Publish to npm if: steps.check.outputs.changed == 'true' - run: npm publish - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} + run: pnpm publish --provenance