zet-api 1.0.0

package/.github/workflows/publish-to-npm.yml

@@ -0,0 +1,80 @@
+name: Publish to NPM (OIDC)
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'src/**'
+      - 'package.json'
+      - 'tsconfig.json'
+      - 'pnpm-lock.yaml'
+  workflow_dispatch:
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+          always-auth: true
+
+      - name: Ensure latest npm
+        run: npm install -g npm@latest
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v3
+        with:
+          version: latest
+
+      - name: Cache pnpm store
+        uses: actions/cache@v3
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Check if package needs publishing
+        id: check_publish
+        run: |
+          current_version=$(node -p "require('./package.json').version")
+          package_name=$(node -p "require('./package.json').name")
+          published_version=$(npm view $package_name version 2>/dev/null || echo "0.0.0")
+
+          echo "Current version: $current_version"
+          echo "Published version: $published_version"
+
+          if [ "$current_version" == "$published_version" ]; then
+            echo "No new version. Skipping publish."
+            echo "should_publish=false" >> $GITHUB_OUTPUT
+          else
+            echo "New version available. Proceeding to publish."
+            echo "should_publish=true" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Run linting
+        if: steps.check_publish.outputs.should_publish == 'true'
+        run: pnpm run lint
+
+      - name: Build the project
+        if: steps.check_publish.outputs.should_publish == 'true'
+        run: pnpm run build
+
+      - name: Publish to NPM using OIDC
+        if: steps.check_publish.outputs.should_publish == 'true'
+        run: pnpm publish --access public --no-git-checks --provenance