release.yaml

name: Release
on:
  push:
    branches:
      - main

permissions:
  contents: write
  packages: write
  issues: read

jobs:
  release:
    runs-on: ubuntu-latest

    name: Release package to NPM
    steps:
      - name: Checkout source code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Use Node.js latest LTS version
        uses: actions/setup-node@v3
        with:
          node-version: lts/*
          registry-url: 'https://npm.pkg.github.com'
          scope: '@makerxstudio'
          cache: 'npm'

      # run npm ci preventing script access to npm auth token
      - run: npm ci --ignore-scripts
        env:
          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      # allow scripts to run without npm auth token
      - run: npm rebuild

      - name: Lint commit messages
        run: npx commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose

      - name: Build package
        run: npm run build

      - name: Run tests
        run: npm test

      - name: Release package
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: npx semantic-release