Merge pull request #36 from adrienne-deriv/semantic-release-automation

[FEQ] Added semantic releases automation

.github/workflows/build-and-publish.yml

@@ -0,0 +1,45 @@
+name: Build and Publish to NPM
+on:
+    push:
+        branches:
+          - master
+          - next
+          - next-major
+          - alpha
+          - beta
+          - development
+
+jobs:
+    build_and_publish_npm:
+        name: Release
+        runs-on: ubuntu-latest
+        environment: Production
+        permissions:
+            contents: write # to be able to publish a GitHub release
+            issues: write # to be able to comment on released issues
+            pull-requests: write # to be able to comment on released pull requests
+            id-token: write # to enable use of OIDC for npm provenance
+        steps:
+            - name: Checkout
+              uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+              with:
+                  fetch-depth: 0
+            - name: Setup Node.js
+              uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
+              with:
+                  node-version: '20'
+            - name: Update to latest npm (temporary fix for audit below)
+              run: npm install --global npm
+            - name: Install dependencies
+              run: npm clean-install
+            - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+              run: npm audit signatures
+            - name: Prepublish
+              run: npm run prepublish
+            - name: Release
+              if: success()
+              env:
+                  CI: true
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  NPM_TOKEN: ${{ secrets.NPM_TOKEN}}
+              run: npx semantic-release