Bump the npm-production group with 2 updates #107

	name: Continuous Delivery

	on:
	pull_request:
	types:
	- closed
	branches:
	- main
	workflow_dispatch:

	permissions:
	contents: write

	jobs:
	release:
	name: Create Release
	runs-on: ubuntu-latest

	# Only run this job if one of the following is true:
	# - It was run manually.
	# - A PR was merged that was not from Dependabot or a fork.
	if: \|
	github.event_name == 'workflow_dispatch' \|\|
	(
	github.event.pull_request.merged == true &&
	startsWith(github.head_ref, 'dependabot/') == false &&
	github.event.pull_request.head.repo.fork == false
	)

	outputs:
	tag: v${{ steps.tag.outputs.version }}

	steps:
	- name: Checkout
	id: checkout
	uses: actions/checkout@v4
	with:
	fetch-tags: true

	- name: Tag
	id: tag
	uses: issue-ops/[email protected]
	with:
	manifest-path: package.json
	workspace: ${{ github.workspace }}
	ref: main

	- name: Create Release
	id: release
	uses: issue-ops/[email protected]
	with:
	tag: v${{ steps.tag.outputs.version }}

	publish-npm:
	name: Publish to npm
	runs-on: ubuntu-latest

	needs: release

	steps:
	- name: Checkout
	id: checkout
	uses: actions/checkout@v4
	with:
	fetch-tags: true

	- name: Setup Node.js
	id: setup-node
	uses: actions/setup-node@v4
	with:
	cache: npm
	node-version-file: .node-version
	registry-url: https://registry.npmjs.org/

	- name: Install Dependencies
	id: install
	run: npm ci

	- name: Test
	id: test
	run: npm run ci-test

	- name: Publish
	id: publish
	env:
	NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
	run: \|
	npm whoami
	npm publish --ignore-scripts --access public

Provide feedback