ci: manage permissions and setup secrets #5

	name: CI

	on:
	push:
	branches:
	- master
	workflow_dispatch:

	jobs:
	build:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up Bun
	uses: oven-sh/setup-bun@v1

	- name: Install dependencies
	run: bun install --frozen-lockfile

	- name: Build project
	run: bun run build

	publish:
	needs: build
	runs-on: ubuntu-latest
	permissions:
	contents: write
	issues: write
	pull-requests: write
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up Bun
	uses: oven-sh/setup-bun@v1
	- name: Set up Node.js
	uses: actions/setup-node@v2
	with:
	node-version: 'lts/iron'

	- name: Install dependencies
	run: bun install --frozen-lockfile

	- name: Build project
	run: bun run build

	- name: Release
	run: bunx semantic-release
	env:
	NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback