github ci: add publish-npm workflow

.github/workflows/publish-npm.yml

@@ -0,0 +1,23 @@
+name: Publish package to npm
+on:
+ release:
+ types: [created]
+jobs:
+ build:
+ runs-on: ubuntu-latest
+ permissions:
+ contents: read
+ id-token: write
+ steps:
+ - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+ - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
+ with:
+ node-version: ${{ matrix.node }}
+ registry-url: 'https://registry.npmjs.org'
+ cache: 'npm'
+ - run: npm ci
+ - run: npm run build
+ - run: git diff --quiet || { echo 'working directory dirty after build'; exit 1; }
+ - run: npm publish --provenance --access public
+ env:
+ NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}