publish.yaml

name: Publish

on:
  push:
    branches:
      - main
      - alpha
      - beta

jobs:
  run-tests:
    name: Tests
    uses: ./.github/workflows/test.yaml
    # Must pass in secrets here so that the calling workflow can pass in the NPM_TOKEN needed to install private packages.
    secrets:
      NPM_TOKEN: ${{ secrets.NPM_TOKEN_PUBLIC_PUBLISH }}
      VITE_AUTH_URL: ${{ secrets.VITE_AUTH_URL }}
  publish:
    needs: run-tests
    name: Build and Publish
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          token: ${{ secrets.KONGPONENTS_BOT_PAT }}

      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version-file: '.nvmrc'

      - name: Install dependencies
        run: yarn install --frozen-lockfile

      - name: Lint
        run: yarn lint

      - name: Build
        run: yarn build

      - name: Create .npmrc
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN_PUBLIC_PUBLISH }}
        # Reference the env variable NPM_TOKEN here, not the secret
        run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > .npmrc

      - name: Semantic Release
        uses: cycjimmy/semantic-release-action@v4
        env:
          # Since branch protections are on (pushing commits) you need to use a bot PAT
          GITHUB_TOKEN: ${{ secrets.KONGPONENTS_BOT_PAT }}
          NPM_TOKEN: ${{ secrets.NPM_TOKEN_PUBLIC_PUBLISH }}